In sam2p 0.49.3, the inxpmreader function in in_xpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14629.json"