216 matches found
CVE-2017-12122
The CVE-2017-12122 entry concerns SDL2_image-2.0.2: an exploitable heap overflow in the ILBM image rendering path that can lead to code execution when a specially crafted ILBM image is displayed. Public documents confirm impact on SDL2_image and related packages (e.g., Debian, Gentoo GLSA), with ...
CVE-2017-14442
CVE-2017-14442 affects SDL2_image-2.0.2 BMP image rendering, causing a stack overflow that can lead to remote code execution when a specially crafted BMP image is processed. Public sources describe the vulnerability across multiple advisories (Debian DSA-4184-1, Mageia MGASA-2018-0454) and indica...
CVE-2017-14449
SDL2_image-2.0.2 contains a double-free vulnerability in the XCF image rendering path. A specially crafted XCF image can trigger a double-free, potentially enabling arbitrary behavior on vulnerable systems. Affected: SDL2_image libraries (notably 2.0.2). Public advisories (e.g., Mageia GLSA-2018-...
CVE-2017-14441
SDL2_image-2.0.2 contains an exploitable vulnerability in the ICO image rendering path: a crafted ICO can trigger an integer overflow that cascades to a heap overflow and code execution (CVE-2017-14441). Public advisories reference SDL2_image 2.0.4 as the fixed version and encourage upgrading (e....
CVE-2017-14441
An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2image-2.0.2. A specially crafted ICO image can cause an integer overflow, cascading to a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this...
CVE-2017-14440
An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...
CVE-2017-14442
An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2image-2.0.2. A specially crafted BMP image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...
CVE-2017-14448
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...
CVE-2017-14450
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability...
CVE-2017-12122
An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2image-2.0.2. A specially crafted ILBM image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...
CVE-2017-14440
SDL2_image-2.0.2 contains an exploitable vulnerability in ILBM image rendering that can trigger a stack overflow and lead to code execution when processing a crafted ILBM image. This vulnerability is corroborated across multiple sources (e.g., Debian DSA-4184-1, GLSA-201903-17, Mageia MGASA-2018-...
CVE-2017-14448
CVE-2017-14448 affects SDL2_image-2.0.2: the XCF image rendering path can overflow the heap, enabling code execution when a specially crafted XCF image is displayed. Public advisories indicate upgrading to SDL2_image-2.0.4 (or newer) to fix this issue; other sources note related advisories upgrad...
CVE-2017-14449
A double-Free vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to trigger this vulnerability...
CVE-2017-12122
An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2image-2.0.2. A specially crafted ILBM image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...
CVE-2017-14450
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability...
CVE-2017-14440
An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...
CVE-2017-14449
A double-Free vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to trigger this vulnerability...
Vulnerability Spotlight: Multiple Simple DirectMedia Layer Vulnerabilities
Discovered by Lilith Wyatt of Cisco Talos Overview Talos is disclosing several vulnerabilities identified in Simple DirectMedia Layer's SDL2Image library that could allow code execution. Simple DirectMedia Layer is a cross-platform development library designed to provide low level access to audio...
CVE-2018-3839
An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2image-2.0.2. A specially crafted XCF image can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can display a specially crafted image to...
CVE-2018-3838
An exploitable information vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2image-2.0.2. A specially crafted XCF image can cause an out-of-bounds read on the heap, resulting in information disclosure. An attacker can display a specially crafted image t...