CVE-2017-16663 — Integer Overflow or Wraparound in Project Sam2p

CWE-190 — Integer Overflow or Wraparound4 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.2%
top 61.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Sam2p Project Sam2p
Timeline
PublishedNov 8
Latest updateMay 14

Description

In sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in input-bmp.ci in the function ReadImage, because "width * height" multiplications occur unsafely.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶Ubuntusam2p_project/sam2p< 0.49.2-3+deb8u3build0.14.04.1+1

🔴Vulnerability Details

3
GHSA
GHSA-prvx-c5j5-9gxq: In sam2p 0↗2022-05-14
▶
OSV
CVE-2017-16663: In sam2p 0↗2017-11-08
▶
CVEList
CVE-2017-16663: In sam2p 0↗2017-11-08
▶
CVE-2017-16663 — Integer Overflow or Wraparound | cvebase