An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially crafted ILBM image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sdl2_image | Jun 13, 2018 | Apr 24, 2018 |
| Debian | — | Upgrade libsdl2-imageUpgrade sdl-image1.2 | Apr 21, 2018 | Mar 18, 2018 |
| Gentoo Linux | — | Upgrade media-libs/sdl2-image. | Mar 29, 2019 | Apr 24, 2018 |
| Suse | — | Upgrade SDL_image-develUpgrade SDL_image | Mar 20, 2018 | Mar 18, 2018 |
| Ubuntu | — | Upgrade libsdl2-imageUpgrade sdl-image1.2 | Nov 19, 2024 | Apr 24, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub