汇总 ctan 相关全部产品的 CVE 与安全漏洞情报，包括 CVSS、EPSS、公开时间与漏洞情报数据。
常见弱点模式包括 缓冲区溢出与内存损坏，在 生产负载与软件部署 使用场景中可能带来 应用崩溃与内存损坏 等风险。
相关漏洞数据主要来源于公开漏洞披露与安全公告，可用于评估历史漏洞暴露面与修复优先级。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2024-40446 | An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted script | [email protected] | 9.8 | 0.60% | 2025-04-22 | 2026-06-17 |
| CVE-2024-40445 | A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary files by manipulating crafted input paths. | [email protected] | 7.3 | 0.59% | 2025-04-22 | 2026-06-17 |
| CVE-2023-51890 | An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL. | [email protected] | 7.5 | 0.86% | 2024-01-24 | 2026-06-17 |
| CVE-2023-51889 | Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in the application URL. | [email protected] | 9.8 | 1.28% | 2024-01-24 | 2026-06-17 |
| CVE-2023-51888 | Buffer Overflow vulnerability in the nomath() function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL. | [email protected] | 7.5 | 0.83% | 2024-01-24 | 2026-06-17 |
| CVE-2023-51887 | Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL. | [email protected] | 9.8 | 2.47% | 2024-01-24 | 2026-06-17 |
| CVE-2023-51886 | Buffer Overflow vulnerability in the main() function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath. | [email protected] | 7.5 | 0.83% | 2024-01-24 | 2026-06-17 |
| CVE-2023-51885 | Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component. | [email protected] | 9.8 | 1.28% | 2024-01-24 | 2026-06-17 |