An exploitable out of bounds write vulnerability exists in version 2.2 of the Per Face Texture mapping application known as PTEX. The vulnerability is present in the reading of a file without proper parameter checking. The value read in, is not verified to be valid and its use can lead to a buffer overflow, potentially resulting in code execution.
📦
ptex
Vendor: disneyanimation
Actively Exploited
0
CISA KEV List
PoC / Exploits
0
Code Available
Total RCEs
1
Remote Access
Total CVEs
1
Total Indexed
Avg. EPSS
2.70%
Exploit Prob.
Security Vulnerability Index
Page 1 / 1
8.8
CVSS
CVE-2018-3835
RCE
Severity: HIGH
7.5
CVSS
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Severity: HIGH