Fatih Çelik (@fatihclk01) “While fuzzing GNOME Evince, I discovered a Use-After-Free (UaF) vulnerability ro”

Fatih Çelik

@fatihclk01

Mostly finding bugs, rarely turning them into vulnerabilities

加入 June 2018

293 正在关注 474 粉丝

Fatih Çelik@fatihclk01

2026.07.22 19:20

While fuzzing GNOME Evince, I discovered a Use-After-Free (UaF) vulnerability rooted in TeX Live’s SyncTeX parser, tracked as CVE-2026-63729. Since SyncTeX is embedded across various document previewers and TeX tools, downstream applications parsing untrusted SyncTeX files were affected. • Affected: TeX Live versions up to 2025 • Fixed in: TeX Live 2026 Read my blog post here:

显示更多