CVEvulnerability
CVE-2018-3835
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-01-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping application known as PTEX. The vulnerability is present in the reading of a file without proper parameter checking. The value read in, is not verified to be valid and its use can lead to a buffer overflow, potentially resulting in code execution.
Affected configurations
• disneyanimation ptex 2.2
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0515 Exploit, Third Party Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0515 Exploit, Third Party Advisory