CVE-2017-14637

Critical

Published: 22/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In sam2p version 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. This can also cause a write to an illegal address.

Risk Assessment

This vulnerability may lead to unexpected application behavior, potentially resulting in crashes or exploitation by malicious software.

Recommendation

It is recommended to update to the latest version of sam2p to mitigate this vulnerability and conduct a code audit to identify other potential issues.

Original NVD description (English source)

In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an illegal address.