What’s Vulnerable › Vulnerabilities

CVE-2024-40445

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-22 · updated 2026-06-17
• Weakness: CWE-77

Description

A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary files by manipulating crafted input paths.

Affected products

• Ctan Mimetex: before 1.77 — fixed in 1.77

How to fix

Upgrade to a fixed version: Ctan Mimetex 1.77. Check the vendor advisory for mitigations.

References

• https://github.com/Oefenweb/mimetex/blob/master/mimetex.c#L12414-L12423
• https://github.com/TaiYou-TW/CVE-2024-40445_CVE-2024-40446/
• https://youtu.be/OII16TteaJw
• https://youtu.be/W2KPHFNfgrg

Get alerted when CVE-2024-40445 or the next vulnerability affects your stack