CyberRota Analysis
AI-GeneratedThe RaTeX math rendering engine prior to version 0.1.11 is vulnerable to a denial of service due to a stack overflow caused by unbounded recursion in its parser, which can be triggered by a short, nested LaTeX input. This vulnerability results in an unrecoverable process termination, making it critical for users of RaTeX to upgrade to version 0.1.11 to mitigate potential service disruptions. Organizations utilizing this engine, especially in environments where untrusted input is processed, should prioritize this update to maintain system stability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, RaTeX’s recursive-descent parser recurses one (or more) native stack frame per nesting level at `{`, `\left`, `\sqrt{`, `^{`, etc, with no maximum depth limit. A short, ~10 KB input of nested groups overflows the 8 MB main-thread stack and aborts the process. With `panic = "abort"` (`Cargo.toml:48`), and because a Rust stack overflow is always a fatal `SIGABRT` regardless of panic strategy this is an unrecoverable, whole-process denial of service reachable from a single untrusted LaTeX string. Version 0.1.11 fixes the issue.