CyberRota Analysis
AI-GeneratedThe vulnerability affects the SyncTeX parser used in TeX Live and applications like GNOME Evince, allowing attackers to exploit a heap use-after-free condition through malformed .synctex or .synctex.gz files. This can lead to application crashes or potentially arbitrary code execution due to the mishandling of memory pointers. Organizations utilizing these products should prioritize patching this vulnerability to mitigate risks associated with document processing.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. A malformed SyncTeX file can construct a ref node with a NULL parent pointer, causing the replacement routine to fail to detach the node from its sibling chain, which triggers recursive freeing of live tree nodes and leaves dangling pointers that are later accessed by the parser during document load.