CVE-2018-7554: Debian Linux

Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days.

There is an invalid free in ReadImage in input-bmp.ci that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact.

Affected products

• Debian Debian Linux: version 7.0 only
• SAM2P Project SAM2P: version 0.49.4 only

Published 2018-02-28. Last modified 2026-06-17.