critical9.8
CVE-2018-7554
There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4.
Impact
There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sam2p Project | Sam2p | Version 0.49.4 |
| Debian | Debian Linux | Version 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891527
- https://github.com/pts/sam2p/issues/29
- https://lists.debian.org/debian-lts-announce/2018/04/msg00004.html
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891527
- https://github.com/pts/sam2p/issues/29
- https://lists.debian.org/debian-lts-announce/2018/04/msg00004.html