CVE catalog
CVE-2023-46048
texlive-bin: CVE-2023-46048
- Severity
- Low · CVSS 3.3
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.29% · Oct 25, 2026
Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed because it should be categorized as a usability problem.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | texlive-bin | sid | 2026.20260303.78225+ds-5 | vulnerable |
| Debian | texlive-bin | forky | 2026.20260303.78225+ds-5 | vulnerable |
| Debian | texlive-bin | trixie | 2024.20240313.70630+ds-6 | vulnerable |
| Debian | texlive-bin | bookworm | 2022.20220321.62855-5.1+deb12u2 | vulnerable |
| Suse | texlive | linux enterprise module for basesystem 15 sp7 | 2021.20210325-150600.38.3.1 | fixed |
| Suse | texlive | linux enterprise module for desktop applications 15 sp7 | 2021.20210325-150600.38.3.1 | fixed |
| Suse | texlive | linux enterprise module for basesystem 15 sp5 | 2021.20210325-150400.31.6.4 | fixed |
| Suse | texlive | linux enterprise module for desktop applications 15 sp5 | 2021.20210325-150400.31.6.4 | fixed |
| Opensuse | texlive | leap 15.5 | 2021.20210325-150400.31.6.4 | fixed |
| Suse | texlive | linux enterprise software development kit 12 sp5 | 2013.20130620-22.11.1 | fixed |
| Suse | texlive | linux enterprise server 12 sp5 | 2013.20130620-22.11.1 | fixed |
| Suse | texlive | linux enterprise server for sap applications 12 sp5 | 2013.20130620-22.11.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | texlive-bin | source | sid | (unfixed) | unimportant | Not reported | Not reported |
| Debian | texlive-bin | source | forky | (unfixed) | unimportant | Not reported | Not reported |
| Debian | texlive-bin | source | trixie | (unfixed) | unimportant | Not reported | Not reported |
| Debian | texlive-bin | source | bookworm | (unfixed) | unimportant | Not reported | Not reported |
| Suse | texlive | rpm | linux enterprise module for basesystem 15 sp7 | 2021.20210325-150600.38.3.1 | Not reported | SUSE-SU-2026:3628-1 | Not reported |
| Suse | texlive | rpm | linux enterprise module for desktop applications 15 sp7 | 2021.20210325-150600.38.3.1 | Not reported | SUSE-SU-2026:3628-1 | Not reported |
| Suse | texlive | rpm | linux enterprise module for basesystem 15 sp5 | 2021.20210325-150400.31.6.4 | Not reported | SUSE-SU-2024:1310-1 | Not reported |
| Suse | texlive | rpm | linux enterprise module for desktop applications 15 sp5 | 2021.20210325-150400.31.6.4 | Not reported | SUSE-SU-2024:1310-1 | Not reported |
| Opensuse | texlive | rpm | leap 15.5 | 2021.20210325-150400.31.6.4 | Not reported | SUSE-SU-2024:1310-1 | Not reported |
| Suse | texlive | rpm | linux enterprise software development kit 12 sp5 | 2013.20130620-22.11.1 | Not reported | SUSE-SU-2024:1296-1 | Not reported |
| Suse | texlive | rpm | linux enterprise server 12 sp5 | 2013.20130620-22.11.1 | Not reported | SUSE-SU-2024:1296-1 | Not reported |
| Suse | texlive | rpm | linux enterprise server for sap applications 12 sp5 | 2013.20130620-22.11.1 | Not reported | SUSE-SU-2024:1296-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3628-1.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2023-46048]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1296-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:1310-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:3628-1]
- [https://security-tracker.debian.org/tracker/CVE-2023-46048]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]