CVE-2017-14636
CRITICALsam2p 0.49.3 - Integer Overflow and Memory Corruption in Image::Indexed::sortPal
Title source: llmDescription
Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d[0xfffffffe] array element.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://github.com/pts/sam2p/issues/14
Scores
CVSS v3
9.8
EPSS
0.0123
EPSS Percentile
65.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-190
Status
published
Products (1)
sam2p_project/sam2p
0.49.3
Published
Sep 22, 2017
Tracked Since
Feb 18, 2026