Known Vulnerabilities for products from Sam2p Project

Listed below are 18 of the newest known vulnerabilities associated with the vendor "Sam2p Project".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2020-19492 There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lea... 7.8 - HIGH 2021-07-21 2021-07-30
CVE-2020-19491 There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead... 7.8 - HIGH 2021-07-21 2022-06-28
CVE-2018-12601 There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possi... 9.8 - CRITICAL 2018-06-20 2020-08-24
CVE-2018-12578 There is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service ... 9.8 - CRITICAL 2018-06-19 2020-08-24
CVE-2018-11490 The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4,... 8.8 - HIGH 2018-05-26 2023-02-03
CVE-2018-11489 The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4,... 8.8 - HIGH 2018-05-26 2023-11-07
CVE-2018-7554 There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted input wil... 9.8 - CRITICAL 2018-02-28 2019-03-01
CVE-2018-7553 There is a heap-based buffer overflow in the pcxLoadRaster function of in_pcx.cpp in sam2p 0.49.4. A crafted input will lead ... 9.8 - CRITICAL 2018-02-28 2020-08-24
CVE-2018-7552 There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4. A c... 9.8 - CRITICAL 2018-02-28 2019-03-13
CVE-2018-7551 There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4. A crafted input... 9.8 - CRITICAL 2018-02-28 2019-03-13
CVE-2018-7487 There is a heap-based buffer overflow in the LoadPCX function of in_pcx.cpp in sam2p 0.49.4. A Crafted input will lead to a d... 7.8 - HIGH 2018-02-26 2020-08-24
CVE-2017-16663 In sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in input-bmp.ci in the function Rea... 5.5 - MEDIUM 2017-11-08 2018-02-04
CVE-2017-14637 In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a w... 9.8 - CRITICAL 2017-09-22 2017-09-27
CVE-2017-14636 Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in th... 9.8 - CRITICAL 2017-09-22 2017-09-27
CVE-2017-14631 In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffer over... 9.8 - CRITICAL 2017-09-21 2017-09-27
CVE-2017-14630 In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp, leading to an invalid writ... 9.8 - CRITICAL 2017-09-21 2017-09-27
CVE-2017-14629 In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash when writing to... 7.5 - HIGH 2017-09-21 2017-09-27
CVE-2017-14628 In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp. 9.8 - CRITICAL 2017-09-21 2017-09-27

Known software with vulnerabilities from Sam2p Project

Type Vendor Product Version
ApplicationSam2p ProjectSam2p0.49.3