CVE-2017-14636

Critical

Published: 22/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Due to an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. This also causes memory corruption due to an attempted write to the invalid d[0xfffffffe] array element.

Risk Assessment

Memory corruption may lead to unpredictable application behavior, creating a risk of exploitation by malicious software. Organizations may be exposed to attacks that could result in data loss or system takeover.

Recommendation

It is recommended to upgrade to a newer version of sam2p that addresses the integer overflow issue. Additionally, monitoring systems for unauthorized memory changes can help detect potential attacks.

Original NVD description (English source)

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d[0xfffffffe] array element.