CVE-2017-14631

Published Sep 21, 2017 CVSS 3.0 · 9.8 Critical EPSS 1.6% KEV · Not listed
Description
In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffer overflow.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1127-1 sam2p security update
EUVD EUVD EUVD-2017-6131 In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffer overflow.
References
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Sep 16, 2024, 5:14 PM
Reserved
Sep 21, 2017, 12:00 AM
Status
Modified
Published
Sep 21, 2017, 7:29 AM
Modified
Jun 17, 2026, 1:06 AM