CVE-2024-34490: Maxima

Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days.

In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local attacker who can create files in advance with these names. This affects, for example, plot2d.

Affected products

• Maxima Maxima: before 5.47.0.commit_51704c (fixed in 5.47.0.commit_51704c)

Published 2024-05-05. Last modified 2026-06-17.