An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL_image 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sdl2_image | Jun 14, 2018 | Oct 11, 2017 |
| Debian | — | Upgrade sdl-image1.2Upgrade libsdl2-image | Apr 21, 2018 | Oct 11, 2017 |
| Suse | — | Upgrade SDL_image-debugsourceUpgrade libSDL_image-1_2-0-32bitUpgrade SDL2_image-debugsourceUpgrade libSDL2_image-2_0-0-debuginfoUpgrade libSDL2_image-devel-32bitUpgrade libSDL_image-devel-32bitUpgrade libSDL_image-1_2-0Upgrade libSDL2_image-2_0-0-32bitUpgrade libSDL2_image-develUpgrade libSDL_image-1_2-0-debuginfo-32bitUpgrade libSDL2_image-2_0-0-debuginfo-32bitUpgrade libSDL_image-develUpgrade libSDL2_image-2_0-0Upgrade libSDL_image-1_2-0-debuginfo | Feb 21, 2018 | Oct 11, 2017 |
| Ubuntu | — | Upgrade libsdl2-imageUpgrade sdl-image1.2 | Nov 19, 2024 | Oct 11, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub