← All advisories

Critical severity9.8NVD Advisory· Published Oct 29, 2019· Updated Jun 17, 2026

CVE-2019-18604

CVE-2019-18604

Description

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

TeXLive/axohelpllm-create
Range: <1.3
TeXLive/axodraw2llm-fuzzy
Range: <2.1.1b
axodraw2/axodraw2description
Axohelp.c Project/Axohelp.c
cpe:2.3:a:axohelp.c_project:axohelp.c:*:*:*:*:*:*:*:*
Range: <1.3
Axodraw2 Project/Axodraw2
cpe:2.3:a:axodraw2_project:axodraw2:*:*:*:*:*:*:*:*
Range: <=2.1.1
osv-coords
pkg:rpm/opensuse/texlive&distro=openSUSE%20Tumbleweed
Range: < 2021.20210325.svn34398-76.3

Patches

Vulnerability mechanics

References

2

github.com/TeX-Live/texlive-source/commit/9216833a3888a4105a18e8c349f65b045ddb1079nvdPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2023/05/msg00033.htmlnvd

News mentions

0

No linked articles in our index yet.