TI-2026-45316 CVE-2026-63729 · GHSA-jf22-92mg-7xxh
TeX Live SyncTeX Parser Heap Use-After-Free via Malformed SyncTeX File
Priority LOW 29
The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentiall…