What’s Vulnerable › Vulnerabilities

CVE-2024-40446

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-22 · updated 2026-06-17
• Weakness: CWE-94

Description

An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted script

Affected products

• Ctan Mimetex: before 1.77 — fixed in 1.77

How to fix

Upgrade to a fixed version: Ctan Mimetex 1.77. Check the vendor advisory for mitigations.

References

• https://github.com/TaiYou-TW/CVE-2024-40445_CVE-2024-40446/
• https://youtu.be/S3cmZkWIi6o

Get alerted when CVE-2024-40446 or the next vulnerability affects your stack