Fatih Çelik (@fatihclk01)
@fatihclk01
Mostly finding bugs, rarely turning them into vulnerabilities
293 正在关注 474 粉丝
While fuzzing GNOME Evince, I discovered a Use-After-Free (UaF) vulnerability rooted in TeX Live’s SyncTeX parser, tracked as CVE-2026-63729.
Since SyncTeX is embedded across various document previewers and TeX tools, downstream applications parsing untrusted SyncTeX files were affected.
• Affected: TeX Live versions up to 2025
• Fixed in: TeX Live 2026
Read my blog post here:
显示更多
