CVE-2017-14637

In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an illegal address.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-09-22

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Sam2p (Sam2p Project)

References

• https://github.com/pts/sam2p/issues/14