CVE-2026-63729

Name of the Vulnerable Software and Affected Versions TeX Live (affected versions not specified) GNOME Evince (affected versions not specified)

Description The SyncTeX parser (synctex parser.c) contains a heap use-after-free issue. This occurs when a malformed .synctex or .synctex.gz file constructs a ref node with a NULL parent pointer. This causes the replacement routine to fail to detach the node from its sibling chain, triggering recursive freeing of live tree nodes and leaving dangling pointers that the parser accesses during document load. This can lead to application crashes or potential arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.