CVE-2017-14629: SAM2P Project SAM2P

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element.

Affected products

Published 2017-09-21. Last modified 2026-06-17.