OPENSUSE-SU-2019:2071-1: SDL_image&distro=openSUSE Leap 15.0 openSUSE

CVSS: UnknownPublished
Published 05-09-2019Last modified 07-05-2025
Open JSON

Vulnerability summary

OPENSUSE-SU-2019:2071-1 is a vulnerability in SDL_image&distro=openSUSE Leap 15.0 openSUSE with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 7 · Downstream 0 · Related 7
CVE-2019-13616CVE-2019-5052CVE-2019-5057CVE-2019-5058CVE-2019-5059CVE-2019-5060

Timeline

  1. 05-09-2019
    PublishedVulnerability first disclosed.
  2. 07-05-2025
    Last modifiedVulnerability information updated.

Description

Security update for SDL_image This update for SDL_image fixes the following issues: Update SDL_Image to new snapshot 1.2.12+hg695. Security issues fixed: * TALOS-2019-0821 CVE-2019-5052: exploitable integer overflow vulnerability when loading a PCX file (boo#1140421) * TALOS-2019-0841 CVE-2019-5057: code execution vulnerability in the PCX image-rendering functionality of SDL2_image (boo#1143763) * TALOS-2019-0842 CVE-2019-5058: heap overflow in XCF image rendering can lead to code execution (boo#1143764) * TALOS-2019-0843 CVE-2019-5059: heap overflow in XPM image handling (boo#1143766) * TALOS-2019-0844 CVE-2019-5060: integer overflow in the XPM image (boo#1143768) * CVE-2019-7635: heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c (boo#1124827) * CVE-2019-13616: fix heap buffer overflow when reading a crafted bmp file (boo#1141844).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Opensuse2 products
  • SDL_image&distro=openSUSE Leap 15.0< 1.2.12+hg695-lp151.3.3.1
  • SDL_image&distro=openSUSE Leap 15.1< 1.2.12+hg695-lp151.3.3.1

1 vendor · 2 products

References

15 links
Show all 15 references