Vulnerability Spotlight: TALOS-2018-0523-24 - Multiple Vulnerabilities in Pixars Renderman application

Summary: Cisco Talos reported multiple vulnerabilities in Pixar's RenderMan, which Pixar remedied in version 21.7. An attacker could send a malformed TCP packet to port 4001 using the '0x67' command not followed by one of the four permitted values (0x00-0x03), causing a null pointer dereference and denial of service due to a lack of input validation; a similar issue, TALOS-2018-0524 / CVE-2018-3841, involves the '0x69' command followed by more than one byte of data.
What you should know: The flaw is reachable over TCP on port 4001 with a single malformed packet, so any RenderMan instance exposed on that port is a denial-of-service target until it is on version 21.7.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2018-3841
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026