CVE-2017-14636: Integer Overflow
Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d[0xfffffffe] array element.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14636?
CVE-2017-14636 is considered a high severity vulnerability due to the potential for memory corruption.
How do I fix CVE-2017-14636?
To fix CVE-2017-14636, upgrade to a version of sam2p later than 0.49.3 that addresses this integer overflow issue.
What types of attacks can exploit CVE-2017-14636?
CVE-2017-14636 can be exploited in scenarios where specially crafted input results in an integer overflow and memory corruption.
Is CVE-2017-14636 present in other versions of sam2p?
CVE-2017-14636 specifically affects version 0.49.3 of sam2p; earlier versions may also be susceptible but have not been reported.
What are the symptoms of exploitation of CVE-2017-14636?
Exploitation of CVE-2017-14636 may lead to application crashes or unexpected behavior due to invalid memory access.