CVE-2024-29073

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes installed by default in many Latex distributions, has been overlooked. A specially crafted flashcard can lead to an arbitrary file read. An attacker can share a flashcard to trigger this vulnerability.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-829

Affected software

No affected versions have been published.

Timeline

Published
Jul 22, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-290748.8in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through improper input.CVE-2024-290754.6Active debug code vulnerability exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, CVE-2024-290765.5Uncaught exception for some Intel(R) CST software before version 8.7.10803 may allow an authenticated user to potentially enable denial of sCVE-2024-290776.7Improper access control in some JAM STAPL Player software before version 2.6.1 may allow an authenticated user to potentially enable escalatCVE-2024-290787.5Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unautheCVE-2024-290797.8Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may allow an authenticated user to potentiallyCVE-2024-29084.3The Call Now Button WordPress plugin before 1.4.7 does not sanitise and escape some of its settings, which could allow high privilege usersCVE-2024-290806.5Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software DrivCVE-2024-290828.6Improper access control vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6CVE-2024-290836.7Incorrect default permissions in some Intel(R) Distribution for Python software before version 2024.2 may allow an authenticated user to potCVE-2024-290855.5Improper access control for some BigDL software maintained by Intel(R) before version 2.5.0 may allow an authenticated user to potentially eCVE-2024-290865.5in OpenHarmony v3.2.4 and prior versions allow a local attacker cause DOS through stack overflow.