Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-40445

A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary files by manipulating crafted input paths.

Published

2025-04-22T14:15:24.173

Last Modified

2025-06-23T18:33:00.807

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.3 (HIGH)

Weaknesses

Type: Secondary
CWE-77

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ctan	mimetex	< 1.77	Yes

References

https://github.com/Oefenweb/mimetex/blob/master/mimetex.c#L12414-L12423 Product ([email protected])
https://github.com/TaiYou-TW/CVE-2024-40445_CVE-2024-40446/ Mitigation, Third Party Advisory ([email protected])
https://youtu.be/OII16TteaJw Broken Link ([email protected])
https://youtu.be/W2KPHFNfgrg Broken Link ([email protected])