CVE-2018-10922

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-08-02 · updated 2026-06-17
Weakness: CWE-20

Description

An input validation flaw exists in ttembed. With a crafted input file, an attacker may be able to trigger a denial of service condition due to ttembed trusting attacker controlled values.

Affected products

[UNKNOWN] ttembed: all versions

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10922
https://github.com/hisdeedsaredust/ttembed/issues/2
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10922
https://github.com/hisdeedsaredust/ttembed/issues/2

Get alerted when CVE-2018-10922 or the next vulnerability affects your stack