There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.
[
{
"vendor": "n/a",
"product": "SDL2",
"versions": [
{
"version": "2.x to 2.0.18",
"status": "affected"
}
]
}
]