PT-2018-10183 · Unknown+1 · Ttembed

Sgayou · Published 2018-08-02 · Updated 2019-10-09 · CVE-2018-10921

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue is related to the processing of ttembed input files, where certain files may cause an integer overflow. This overflow could potentially lead to corruption of the input file due to inadequate checking of return codes from fgetc and fputc function calls.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

RCE

Weakness Enumeration

CWE-190

CWE-20

Related Identifiers

CVE-2018-10921

Affected Products

Ttembed

References · 4

• 🔥 https://github.com/hisdeedsaredust/ttembed/issues/3 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10921 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-10921 · Security Note
• https://osv.dev/vulnerability/CVE-2018-10921 · Vendor Advisory