CVE catalog

CVE-2026-63729

Severity: Medium · CVSS 6.8
Published: Jul 21, 2026, 1:35:41 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.18% · Oct 25, 2026

The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a malformed .synctex or .synctex.gz file. A malformed SyncTeX file can construct a ref node with a NULL parent pointer, causing the replacement routine to fail to detach the node from its sibling chain, which triggers recursive freeing of live tree nodes and leaves dangling pointers that are later accessed by the parser during document load.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	okular	sid	`4:26.08.2-1`	vulnerable
Debian	okular	forky	`4:26.08.2-1`	vulnerable
Debian	okular	trixie	`4:25.04.2-1+deb13u1`	vulnerable
Debian	okular	trixie-security	`4:25.04.2-1+deb13u1`	vulnerable
Debian	okular	bookworm	`4:22.12.3-1+deb12u1`	vulnerable
Debian	okular	bookworm-security	`4:22.12.3-1+deb12u1`	vulnerable
Debian	texstudio	sid	`4.9.7+ds-1`	fixed
Debian	texstudio	forky	`4.9.7+ds-1`	fixed
Debian	texstudio	trixie	`4.8.7+ds-1`	vulnerable
Debian	texstudio	bookworm	`4.3.1+ds-2`	vulnerable
Debian	texlive-bin	sid	`2026.20260303.78225+ds-5`	fixed
Debian	texlive-bin	forky	`2026.20260303.78225+ds-5`	fixed
Debian	texlive-bin	trixie	`2024.20240313.70630+ds-6`	vulnerable
Debian	texlive-bin	bookworm	`2022.20220321.62855-5.1+deb12u2`	vulnerable
Cpe	texlive-bin	Not reported	Not reported	vulnerable
Suse	texlive	linux enterprise server ltss extended security 12 sp5	`2013.20130620-22.14.1`	fixed
Suse	evince	linux enterprise module for desktop applications 15 sp7	`45.0-150600.3.6.1`	fixed
Opensuse	evince	tumbleweed	`48.4-2.1`	fixed
Ubuntu	texlive-bin	pro	`2019.20190605.51237-2build1`	vulnerable
Ubuntu	texlive-bin	pro	`2019.20190605.51237-3`	vulnerable
Ubuntu	texlive-bin	pro	`2019.20190605.51237-3build1`	vulnerable
Ubuntu	texlive-bin	pro	`2019.20190605.51237-3build2`	vulnerable
Ubuntu	texlive-bin	pro	`2019.20190605.51237-3ubuntu0.1`	vulnerable
Ubuntu	texlive-bin	pro	`2019.20190605.51237-3ubuntu0.2`	vulnerable
Ubuntu	texlive-bin	pro	`2019.20190605.51237-3ubuntu0.2+esm1`	vulnerable
Ubuntu	texlive-bin	22.04	`2020.20200327.54578-7`	vulnerable
Ubuntu	texlive-bin	22.04	`2020.20200327.54578-7build1`	vulnerable
Ubuntu	texlive-bin	22.04	`2021.20210626.59705-1`	vulnerable
Ubuntu	texlive-bin	22.04	`2021.20210626.59705-1build1`	vulnerable
Ubuntu	texlive-bin	22.04	`2021.20210626.59705-1ubuntu0.1`	vulnerable
Ubuntu	texlive-bin	22.04	`2021.20210626.59705-1ubuntu0.2`	vulnerable
Ubuntu	texlive-bin	22.04	`2021.20210626.59705-1ubuntu0.3`	vulnerable
Ubuntu	texlive-bin	24.04	`2023.20230311.66589-6`	vulnerable
Ubuntu	texlive-bin	24.04	`2023.20230311.66589-7`	vulnerable
Ubuntu	texlive-bin	24.04	`2023.20230311.66589-8`	vulnerable
Ubuntu	texlive-bin	24.04	`2023.20230311.66589-8build1`	vulnerable
Ubuntu	texlive-bin	24.04	`2023.20230311.66589-9`	vulnerable
Ubuntu	texlive-bin	24.04	`2023.20230311.66589-9build2`	vulnerable
Ubuntu	texlive-bin	24.04	`2023.20230311.66589-9build3`	vulnerable
Ubuntu	texlive-bin	26.04	`2024.20240313.70630+ds-6ubuntu2`	vulnerable
Ubuntu	texlive-bin	26.04	`2025.20250727.75242+ds-4ubuntu2`	vulnerable
Ubuntu	texlive-bin	26.04	`2025.20250727.75242+ds-5`	vulnerable
Ubuntu	texlive-bin	26.04	`2025.20250727.75242+ds-5build1`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	okular	source	sid	`(unfixed)`	unimportant	Not reported	Not reported
Debian	okular	source	forky	`(unfixed)`	unimportant	Not reported	Not reported
Debian	okular	source	trixie	`(unfixed)`	unimportant	Not reported	Not reported
Debian	okular	source	bookworm	`(unfixed)`	unimportant	Not reported	Not reported
Debian	texstudio	source	sid	`4.9.6+ds-1`	unimportant	Not reported	Not reported
Debian	texstudio	source	forky	`4.9.6+ds-1`	unimportant	Not reported	Not reported
Debian	texstudio	source	trixie	`(unfixed)`	unimportant	Not reported	Not reported
Debian	texstudio	source	bookworm	`(unfixed)`	unimportant	Not reported	Not reported
Debian	texlive-bin	source	sid	`2026.20260303.78225+ds-2`	unimportant	Not reported	Not reported
Debian	texlive-bin	source	forky	`2026.20260303.78225+ds-2`	unimportant	Not reported	Not reported
Debian	texlive-bin	source	trixie	`(unfixed)`	unimportant	Not reported	Not reported
Debian	texlive-bin	source	bookworm	`(unfixed)`	unimportant	Not reported	Not reported
Suse	texlive	rpm	linux enterprise server ltss extended security 12 sp5	`2013.20130620-22.14.1`	Not reported	SUSE-SU-2026:3924-1	Not reported
Suse	evince	rpm	linux enterprise module for desktop applications 15 sp7	`45.0-150600.3.6.1`	Not reported	SUSE-SU-2026:3512-1	Not reported
Opensuse	evince	rpm	tumbleweed	`48.4-2.1`	Not reported	OPENSUSE-SU-2026:11412-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[elpa-pdf-tools]Affected
Source package: [emacs-pdf-tools]
Details (2)
- 1.0.0-1 · all · bookworm
  Affected
  nvd · emacs-pdf-tools · debian · bookworm
- 1.0.0-1 · all · bookworm
  Affected
  nvd · emacs-pdf-tools · debian · bookworm
[elpa-pdf-tools-server]Affected
Source package: [emacs-pdf-tools]
Details (2)
- 1.0.0-1 · amd64 · bookworm
  Affected
  nvd · emacs-pdf-tools · debian · bookworm
- 1.0.0-1 · arm64 · bookworm
  Affected
  nvd · emacs-pdf-tools · debian · bookworm
[libkpathsea6]Affected
Source package: [texlive-bin]
Details (2)
- 2022.20220321.62855-5.1+deb12u2 · amd64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
- 2022.20220321.62855-5.1+deb12u2 · arm64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
[libkpathsea-dev]Affected
Source package: [texlive-bin]
Details (2)
- 2022.20220321.62855-5.1+deb12u2 · amd64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
- 2022.20220321.62855-5.1+deb12u2 · arm64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
[libokular5core10]Affected
Source package: [okular]
Details (4)
- 4:22.12.3-1+deb12u1 · amd64 · bookworm
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · arm64 · bookworm
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
[libptexenc1]Affected
Source package: [texlive-bin]
Details (2)
- 2022.20220321.62855-5.1+deb12u2 · amd64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
- 2022.20220321.62855-5.1+deb12u2 · arm64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
[libptexenc-dev]Affected
Source package: [texlive-bin]
Details (2)
- 2022.20220321.62855-5.1+deb12u2 · amd64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
- 2022.20220321.62855-5.1+deb12u2 · arm64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
[libsynctex2]Affected
Source package: [texlive-bin]
Details (2)
- 2022.20220321.62855-5.1+deb12u2 · amd64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
- 2022.20220321.62855-5.1+deb12u2 · arm64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
[libsynctex-dev]Affected
Source package: [texlive-bin]
Details (2)
- 2022.20220321.62855-5.1+deb12u2 · amd64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
- 2022.20220321.62855-5.1+deb12u2 · arm64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
[libtexlua53]Affected
Source package: [texlive-bin]
Details (2)
- 2022.20220321.62855-5.1+deb12u2 · all · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
- 2022.20220321.62855-5.1+deb12u2 · all · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
[libtexlua53-5]Affected
Source package: [texlive-bin]
Details (2)
- 2022.20220321.62855-5.1+deb12u2 · amd64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
- 2022.20220321.62855-5.1+deb12u2 · arm64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
[libtexlua53-dev]Affected
Source package: [texlive-bin]
Details (2)
- 2022.20220321.62855-5.1+deb12u2 · all · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
- 2022.20220321.62855-5.1+deb12u2 · all · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
[libtexlua-dev]Affected
Source package: [texlive-bin]
Details (2)
- 2022.20220321.62855-5.1+deb12u2 · amd64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
- 2022.20220321.62855-5.1+deb12u2 · arm64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
[libtexluajit2]Affected
Source package: [texlive-bin]
Details (1)
- 2022.20220321.62855-5.1+deb12u2 · amd64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
[libtexluajit-dev]Affected
Source package: [texlive-bin]
Details (1)
- 2022.20220321.62855-5.1+deb12u2 · amd64 · bookworm
  Affected
  nvd · texlive-bin · debian · bookworm; nvd · texlive-bin · debian · 12
[okular]Affected
Details (4)
- 4:22.12.3-1+deb12u1 · amd64 · bookworm
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · arm64 · bookworm
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
[okular-dev]Affected
Source package: [okular]
Details (4)
- 4:22.12.3-1+deb12u1 · amd64 · bookworm
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · arm64 · bookworm
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
[okular-extra-backends]Affected
Source package: [okular]
Details (4)
- 4:22.12.3-1+deb12u1 · amd64 · bookworm
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · arm64 · bookworm
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
[okular-mobile]Affected
Source package: [okular]
Details (4)
- 4:22.12.3-1+deb12u1 · amd64 · bookworm
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · arm64 · bookworm
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
[qml-module-org-kde-okular]Affected
Source package: [okular]
Details (4)
- 4:22.12.3-1+deb12u1 · amd64 · bookworm
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · arm64 · bookworm
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12
- 4:22.12.3-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · okular · debian · bookworm; nvd · okular · debian · 12

Next results

Observed: Oct 27, 2026, 7:12:48 AM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]