CVE-2017-14440

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially crafted ILBM image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.

Score

CVSS 3.1 8.8 High

Status

Modified - talos-cna@cisco.com

Published

2018-04-24

Last modified

2024-09-17

Weaknesses

CWE-787

Affected products

• Debian Linux (Debian)
• Sdl Image (Libsdl)
• Simple Directmedia Layer (Sam Lantinga And Mattias Engdegrd)

References

• https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html
• https://security.gentoo.org/glsa/201903-17
• https://www.debian.org/security/2018/dsa-4177
• https://www.debian.org/security/2018/dsa-4184
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0489