CVE-2018-10921CWE-20

Certain input files may trigger an integer overflow in ttembed input file processing

Medium · published August 2, 2018

CVSS v3.0
4.3
EPSS
1%
Percentile
63.7
In the wild
Unconfirmed
What it is

Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fgetc/fputc function calls.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01039 · 63.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-08-02T18:00Z
EPSS history
Timeline
  • 02 AUG 18:00Z
    Certain input files may trigger an integer overflow in ttembed input file processing
    cvelistv5