CVE-2019-18604 in axodraw2
Sumário
de MITRE
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf is mishandled.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.