PT-2018-16229 · Walt Disney Animation Studios · Ptex

Published 2018-01-29 · Updated 2023-02-03 · CVE-2018-3835

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Per Face Texture mapping application known as PTEX version 2.2

Description An out of bounds write issue exists due to improper parameter checking when reading a file. The value read is not verified, potentially leading to a buffer overflow and code execution.

Recommendations For PTEX version 2.2, as a temporary workaround, consider restricting the reading of files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2018-3835

Affected Products

Ptex

References · 4

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0515 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-3835 · Security Note
• https://osv.dev/vulnerability/CVE-2018-3835 · Vendor Advisory
• https://t.me/cvenotify/43570 · Telegram Post