Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-14636

Опубликовано: 22 сент. 2017
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d[0xfffffffe] array element.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:sam2p_project:sam2p:0.49.3:*:*:*:*:*:*:*

EPSS

Процентиль: 59%
0.00378
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d[0xfffffffe] array element.

CVSS3: 9.8
debian
больше 8 лет назад

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffff ...

CVSS3: 9.8
github
больше 3 лет назад

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d[0xfffffffe] array element.

EPSS

Процентиль: 59%
0.00378
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-190