CVE-2017-14631

Critical

Published: 21/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In sam2p version 0.49.3, there is an integer signedness error in the pcxLoadRaster function in in_pcx.cpp, leading to a heap-based buffer overflow.

Heap-based buffer overflow may allow an attacker to execute arbitrary code, posing a serious security risk to the system.

It is recommended to upgrade to a newer version of sam2p to mitigate this vulnerability.

Original NVD description (English source)

In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffer overflow.