CVE-2018-4038

An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, while trying to null-terminate a string. A specially crafted document can allow an attacker to pass an untrusted value as a length to a constructor. This constructor will miscalculate a length and then use it to calculate the position to write a null byte. This can allow an attacker to corrupt memory, which can result in code execution under the context of the application. An attacker must convince a victim to open a specially crafted document in order to trigger this vulnerability.

• CWE-131

• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0711Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0711Exploit, Third Party Advisory

Published

Dec 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-4032An exploitable privilege escalation vulnerability exists in …5.5
• CVE-2018-4033The CleanMyMac X software contains an exploitable privilege …5.5
• CVE-2018-4034The CleanMyMac X software contains an exploitable privilege …5.5
• CVE-2018-4035The CleanMyMac X software contains an exploitable privilege …5.5
• CVE-2018-4036The CleanMyMac X software contains an exploitable privilege …5.5
• CVE-2018-4037The CleanMyMac X software contains an exploitable privilege …5.5
• CVE-2018-4039An exploitable out-of-bounds write vulnerability exists in t…7.8
• CVE-2018-4040An exploitable uninitialized pointer vulnerability exists in…7.8
• CVE-2018-4041An exploitable privilege escalation vulnerability exists in …5.5
• CVE-2018-4042An exploitable privilege escalation vulnerability exists in …5.5
• CVE-2018-4043An exploitable privilege escalation vulnerability exists in …5.5
• CVE-2018-4044An exploitable privilege escalation vulnerability exists in …5.5