Sam Lantinga And Mattias Engdegård Simple Directmedia Layer vulnerabilities
7 vulnerabilities
Known vulnerabilities in Sam Lantinga And Mattias Engdegård Simple Directmedia Layer, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-14450alpinesdl2_image+7
EPSS score1.53%
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability.CVE-2017-14440alpinesdl2_image+7EPSS score2.40%
An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.CVE-2017-14441alpinesdl2_image+7EPSS score2.63%
An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2_image-2.0.2. A specially crafted ICO image can cause an integer overflow, cascading to a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.CVE-2017-14448alpinesdl2_image+7EPSS score2.35%
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.CVE-2017-14449alpinesdl2_image+5EPSS score1.62%
A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to trigger this vulnerability.CVE-2017-14442alpinesdl2_image+7EPSS score2.35%
An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2_image-2.0.2. A specially crafted BMP image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.CVE-2017-12122alpinesdl2_image+7EPSS score2.35%
An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially crafted ILBM image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.