Lucene search

K
ubuntucveUbuntu.comUB:CVE-2019-5052
HistoryJul 03, 2019 - 12:00 a.m.

CVE-2019-5052

2019-07-0300:00:00
ubuntu.com
ubuntu.com
11

0.005 Low

EPSS

Percentile

75.5%

An exploitable integer overflow vulnerability exists when loading a PCX
file in SDL2_image 2.0.4. A specially crafted file can cause an integer
overflow, resulting in too little memory being allocated, which can lead to
a buffer overflow and potential code execution. An attacker can provide a
specially crafted image file to trigger this vulnerability.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlibsdl2-image< anyUNKNOWN
ubuntu14.04noarchlibsdl2-image< 2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchlibsdl2-image< anyUNKNOWN
ubuntu18.04noarchsdl-image1.2< 1.2.12-8ubuntu0.1UNKNOWN
ubuntu14.04noarchsdl-image1.2< 1.2.12-5+deb9u1ubuntu0.14.04.1~esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchsdl-image1.2< 1.2.12-5+deb9u1ubuntu0.16.04.1UNKNOWN