The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libsdl2-imageUpgrade sdl-image1.2 | Jul 24, 2019 | Nov 1, 2018 |
| Gentoo Linux | — | Upgrade media-libs/sdl2-image. | Mar 29, 2019 | Nov 1, 2018 |
| Suse | — | Upgrade SDL_imageUpgrade libSDL2_image-devel-32bitUpgrade libSDL2_image-devel-64bitUpgrade libSDL2_image-2_0-0Upgrade SDL_image-develUpgrade libSDL2_image-2_0-0-64bitUpgrade libSDL2_image-2_0-0-32bitUpgrade libSDL2_image-devel | Nov 21, 2018 | Nov 1, 2018 |
| Ubuntu | — | Upgrade libsdl-image1.2 | Jan 15, 2020 | Nov 1, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub