CVE-2018-3977: libsdl sdl_image Out-of-bounds Write
Vulnerability summary
CVE-2018-3977 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in libsdl sdl_image. EPSS estimates a 3.48% chance of exploitation in the next 30 days, higher than 88.9% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 6 · Related 2Timeline
- 01-11-2018PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
CVSS metrics
5 scores · 4 sources · 2 versions- NVDNIST8.8HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
3.48%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.48% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (talosintelligence.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian2 products
- libsdl2-image< 2.0.3+dfsg1-3
- sdl-image1.2< 1.2.12-10
Ubuntu2 products
- libsdl2-image< 2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1
- sdl-image1.2< 1.2.12-5+deb9u1ubuntu0.14.04.1~esm1 | < 1.2.12-5+deb9u1ubuntu0.16.04.1 | < 1.2.12-8ubuntu0.1
Libsdl1 product
- sdl_image2.0.3
Simple directmedia layer1 product
- simple directmedia layerSimple DirectMedia Layer SDL2_image 2.0.3
Suse1 product
- SDL_image&distro=SUSE Linux Enterprise Software Development Kit 11 SP4< 1.2.6-84.46.1
5 vendors · 7 products
References
13 links
- talosintelligence.com/vulnerability_reports/TALOS-2018-0645X Refsource MISCExploitThird Party AdvisoryREPORT