CVE-2018-10921
MEDIUMCVSS 4.3/10EPSS 1.04%
Last modified
CVE-2018-10921 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fgetc/fputc function calls.. EPSS estimates a 1.04% chance of exploitation in the next 30 days.
Description
Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fgetc/fputc function calls.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ttembed Project | Ttembed | All versions |
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10921Exploit, Issue Tracking, Third Party Advisory
- https://github.com/hisdeedsaredust/ttembed/issues/3Exploit, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10921Exploit, Issue Tracking, Third Party Advisory
- https://github.com/hisdeedsaredust/ttembed/issues/3Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-10921?
Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fgetc/fputc function calls.
How severe is CVE-2018-10921?
CVE-2018-10921 has a CVSS score of 4.3/10 (MEDIUM severity). The EPSS model estimates a 1.04% probability of exploitation in the next 30 days.
How do I fix CVE-2018-10921?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-10916It has been discovered that lftp up to and including version…5.3
- CVE-2018-10917pulp 2.16.x and possibly older is vulnerable to an improper …6.8
- CVE-2018-10918A null pointer dereference flaw was found in the way samba c…5.2
- CVE-2018-10919The Samba Active Directory LDAP server was vulnerable to an …4.3
- CVE-2018-1092The ext4_iget function in fs/ext4/inode.c in the Linux kerne…
- CVE-2018-10920Improper input validation bug in DNS resolver component of K…6.8
- CVE-2018-10922An input validation flaw exists in ttembed. With a crafted i…7.5
- CVE-2018-10923It was found that the "mknod" call derived from mknod(2) can…8.1
- CVE-2018-10924It was discovered that fsync(2) system call in glusterfs cli…5.3
- CVE-2018-10925It was discovered that PostgreSQL versions before 10.5, 9.6.…8.1
- CVE-2018-10926A flaw was found in RPC request using gfs3_mknod_req support…8.8
- CVE-2018-10927A flaw was found in RPC request using gfs3_lookup_req in glu…8.1
Are you affected by CVE-2018-10921?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST