← Vulnerability feed

Vulnerability record · CVE-2017-14636 · published 22 September 2017

CVE-2017-14636: Sam2p project sam2p integer overflow vulnerability

SSam2p Project · Sam2p

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d[0xfffffffe] array element.

9.8 CVSS 3.0 Critical EPSS 1.2% · top 32.2% CWE-190 · Integer overflow
9.8CVSS 3.0 base score, v2 7.5
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d[0xfffffffe] array element.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/pts/sam2p/issues/14 Third Party Advisory
https://github.com/pts/sam2p/issues/14 Third Party Advisory

Track CVE-2017-14636 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-12601Sam2p project sam2p out-of-bounds write vulnerabilityThere is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other im…EPSS 2.1%9.8CVE-2018-12578Sam2p project sam2p out-of-bounds write vulnerabilityThere is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly unspecified …EPSS 2.1%9.8CVE-2018-7551Sam2p project sam2p use after free vulnerabilityThere is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial o…EPSS 2.2%9.8CVE-2018-7552Sam2p project sam2p memory buffer overflow vulnerabilityThere is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead t…EPSS 2.2%9.8CVE-2018-7553Sam2p project sam2p out-of-bounds write vulnerabilityThere is a heap-based buffer overflow in the pcxLoadRaster function of in_pcx.cpp in sam2p 0.49.4. A crafted input will lead to a denial of service o…EPSS 2.5%9.8CVE-2018-7554Sam2p project sam2p use after free vulnerabilityThere is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of se…EPSS 2.2%9.8CVE-2017-14637Sam2p project sam2p memory buffer overflow vulnerabilityIn sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an illegal addre…EPSS 1.7%9.8CVE-2017-14628Sam2p project sam2p memory buffer overflow vulnerabilityIn sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp.EPSS 1.6%

Source: NIST National Vulnerability Database (record CVE-2017-14636), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.