CVE-2023-46048

Name of the Vulnerable Software and Affected Versions Tex Live version 944e257

Description The issue is related to a NULL pointer dereference in the writet1.c file located in texk/web2c/pdftexdir. This occurs when handling a crafted cmr10.pfb file. It is noted that the categorization of this issue is disputed, with some considering it a usability problem rather than a security vulnerability.

Recommendations For Tex Live version 944e257, as a temporary workaround, consider restricting the use of the writet1.c function until a patch is available. Additionally, avoid using crafted files such as cmr10.pfb to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.