Talos Simple Direct Media vulnerabilities

2 vulnerabilities

Known vulnerabilities in Talos Simple Direct Media, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2017-2887alpinesdl2_image+13
EPSS score
2.66%
An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL_image 2.0.1. A specially crafted xcf file can cause a stack-based buffer overflow resulting in potential code execution. An attacker can provide a specially crafted XCF file to trigger this vulnerability.8.8CVE-2017-2888canonicalubuntu_linux+9
EPSS score
3.07%
An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.