CVE-2017-14631

In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffer overflow.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-09-21

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Sam2p (Sam2p Project)

References

• https://github.com/pts/sam2p/issues/14