CVE-2010-0829: Jan-Ake Larsson Dvipng

Medium severity, CVSS 4.3. EPSS: 4.5% chance of exploitation in the next 30 days.

Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.

Affected products

• Jan-Ake Larsson Dvipng: version 1.11 only; version 1.12 only
• Tug Tetex: any version

Published 2010-05-07. Last modified 2026-06-16.