CVE-2026-63729

A flaw was found in the SyncTeX parser, part of TeX Live and used by applications like GNOME Evince. A remote attacker could exploit a heap use-after-free vulnerability by providing a specially crafted SyncTeX file (e.g., .synctex or .synctex.gz). This could lead to application crashes or, in severe cases, allow the attacker to execute arbitrary code on the affected system.

The SyncTeX parser shipped with TeX Live and embedded by GNOME Evince in Red Hat Enterprise Linux is affected by this vulnerability. A heap use-after-free in synctex_parser.c can be triggered by opening a specially crafted .synctex file, potentially leading to application crashes or code execution. All shipped versions of TeX Live (pre-2026) and evince are within the affected range.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.