CVE-2018-7554

CVE-2018-7554

EPSS 2.3%

There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891527 https://github.com/pts/sam2p/issues/29 https://lists.debian.org/debian-lts-announce/2018/04/msg00004.html