CVE-2017-14637 In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an illegal address.
CriticalCVSS 9.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an illegal address.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sam2p project sam2p | = 0.49.3 | No fix listed |
References
- github.com exploit third-party-advisory