CVE-2024-40445

7.3 highEPSS 0.6%

A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary files by manipulating crafted input paths.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2025-04-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ctan:mimetex

References

https://github.com/Oefenweb/mimetex/blob/master/mimetex.c#L12414-L12423
https://github.com/TaiYou-TW/CVE-2024-40445_CVE-2024-40446/
https://youtu.be/OII16TteaJw
https://youtu.be/W2KPHFNfgrg

Check your stack JSON