Skip to content
Noroxi

sam2p project records

18 published records for vendor sam2p project.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
88.9%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 18
  3. 21

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

18 records
  • CVE-2018-7553
    40Plan

    There is a heap-based buffer overflow in the pcxLoadRaster function of in_pcx.cpp in sam2p 0.49.4.

    CriticalCVSS 9.8No exploitEPSS 2%

    sam2p project · sam2pFeb 28, 2018

  • CVE-2018-7551
    40Plan

    There is an invalid free in MiniPS::delete0 in minips.cpp that leads to a Segmentation fault in sam2p 0.49.4.

    CriticalCVSS 9.8No exploitEPSS 2%

    sam2p project · sam2pFeb 28, 2018

  • CVE-2018-7554
    40Plan

    There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4.

    CriticalCVSS 9.8No exploitEPSS 2%

    sam2p project · sam2pFeb 28, 2018

  • CVE-2018-7552
    40Plan

    There is an invalid free in Mapping::DoubleHash::clear in mapping.cpp that leads to a Segmentation fault in sam2p 0.49.4.

    CriticalCVSS 9.8No exploitEPSS 2%

    sam2p project · sam2pFeb 28, 2018

  • CVE-2018-12601
    40Plan

    There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified

    CriticalCVSS 9.8No exploitEPSS 2%

    sam2p project · sam2pJun 20, 2018

  • CVE-2018-12578
    40Plan

    There is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly uns

    CriticalCVSS 9.8No exploitEPSS 2%

    sam2p project · sam2pJun 19, 2018

  • CVE-2017-14637
    40Plan

    In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp.

    CriticalCVSS 9.8No exploitEPSS 1%

    sam2p project · sam2pSep 22, 2017

  • CVE-2017-14630
    40Plan

    In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp, leading to an invalid write operation.

    CriticalCVSS 9.8No exploitEPSS 1%

    sam2p project · sam2pSep 21, 2017

  • CVE-2017-14628
    39Monitor

    In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp.

    CriticalCVSS 9.8No exploitEPSS 1%

    sam2p project · sam2pSep 21, 2017

  • CVE-2017-14631
    39Monitor

    In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffer overflow.

    CriticalCVSS 9.8No exploitEPSS 1%

    sam2p project · sam2pSep 21, 2017

  • CVE-2017-14636
    39Monitor

    Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexe

    CriticalCVSS 9.8No exploitEPSS 1%

    sam2p project · sam2pSep 22, 2017

  • CVE-2018-11489
    36Monitor

    The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-bas

    HighCVSS 8.8No exploitEPSS 2%

    giflib project · giflibMay 26, 2018

  • CVE-2018-11490
    36Monitor

    The DGifDecompressLine function in dgif_lib.c in GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p 0.49.4, has a heap-bas

    HighCVSS 8.8No exploitEPSS 2%

    giflib project · giflibMay 26, 2018

  • CVE-2018-7487
    31Monitor

    There is a heap-based buffer overflow in the LoadPCX function of in_pcx.cpp in sam2p 0.49.4.

    HighCVSS 7.8No exploitEPSS 1%

    sam2p project · sam2pFeb 26, 2018

  • CVE-2020-19491
    31Monitor

    There is an invalid memory access bug in cgif.c that leads to a Segmentation fault in sam2p 0.49.4.

    HighCVSS 7.8No exploitEPSS 0%

    sam2p project · sam2pJul 21, 2021

  • CVE-2020-19492
    31Monitor

    There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4.

    HighCVSS 7.8No exploitEPSS 0%

    sam2p project · sam2pJul 21, 2021

  • CVE-2017-14629
    30Monitor

    In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-boun

    HighCVSS 7.5No exploitEPSS 1%

    sam2p project · sam2pSep 21, 2017

  • CVE-2017-16663
    22Monitor

    In sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in input-bmp.ci in the function ReadImage, because

    MediumCVSS 5.5No exploitEPSS 0%

    sam2p project · sam2pNov 8, 2017