CVE-2017-14636

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d0xfffffffe array element...

CVE-2017-14636

CVE-2017-14636 affects sam2p 0.49.3. An integer overflow leads to a loop that may execute 0xffffffff times, causing an invalid read of size 1 in Image::Indexed::sortPal (image.cpp) and memory corruption from writing to d[0xfffffffe]. Downstream advisories (e.g., Debian DLA-1127-1, Mageia MGASA-20...

CVE-2017-14636

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d0xfffffffe array element...