Launchpad.net

CVE 2019-18604

In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.

CVE-2019-18604 (Candidate) is related to these bugs:

Bug #2047912: There is a heap buffer overflow in texlive-bin

Summary				In	Importance	Status
	2047912	There is a heap buffer overflow in texlive-bin		texlive-bin (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.