← Vulnerability feed

Vulnerability record · CVE-2017-14637 · published 22 September 2017

CVE-2017-14637: Sam2p project sam2p memory buffer overflow vulnerability

SSam2p Project · Sam2p

In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an illegal address.

9.8 CVSS 3.0 Critical EPSS 1.7% · top 23.8% CWE-119 · Memory buffer overflow
9.8CVSS 3.0 base score, v2 7.5
1.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an illegal address.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/pts/sam2p/issues/14 ExploitThird Party Advisory
https://github.com/pts/sam2p/issues/14 ExploitThird Party Advisory

Track CVE-2017-14637 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-12601Sam2p project sam2p out-of-bounds write vulnerabilityThere is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other im…EPSS 2.1%9.8CVE-2018-12578Sam2p project sam2p out-of-bounds write vulnerabilityThere is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly unspecified …EPSS 2.1%9.8CVE-2018-7551Sam2p project sam2p use after free vulnerabilityThere is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial o…EPSS 2.2%9.8CVE-2018-7552Sam2p project sam2p memory buffer overflow vulnerabilityThere is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead t…EPSS 2.2%9.8CVE-2018-7553Sam2p project sam2p out-of-bounds write vulnerabilityThere is a heap-based buffer overflow in the pcxLoadRaster function of in_pcx.cpp in sam2p 0.49.4. A crafted input will lead to a denial of service o…EPSS 2.5%9.8CVE-2018-7554Sam2p project sam2p use after free vulnerabilityThere is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of se…EPSS 2.2%9.8CVE-2017-14636Sam2p project sam2p integer overflow vulnerabilityBecause of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPa…EPSS 1.2%9.8CVE-2017-14628Sam2p project sam2p memory buffer overflow vulnerabilityIn sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp.EPSS 1.6%

Source: NIST National Vulnerability Database (record CVE-2017-14637), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.