CVE-2018-12601: Debian Linux

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact.

Affected products

• Debian Debian Linux: version 8.0 only
• SAM2P Project SAM2P: version 0.49.4 only

Published 2018-06-20. Last modified 2026-06-17.