CVE-2017-14629

In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element.

CVSS v3.0

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

1.41% chance of exploitation in the next 30 days, 71th percentile

Published

2017-09-21

Updated

2024-09-17

Proof-of-concept exploits (1)

• pts/sam2p/issues/14

References

• CVE Record
• NVD entry

Related

• CVE-2017-14628
• CVE-2017-14630
• CVE-2017-14631
• CVE-2017-14637
• CVE-2018-12578
• CVE-2018-12601