CVE-2017-14449

A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to trigger this vulnerability.

Score

CVSS 3.0 8.8 High

Status

Modified - talos-cna@cisco.com

Published

2018-04-24

Last modified

2024-09-16

Weaknesses

CWE-415

Affected products

• Debian Linux (Debian)
• Sdl Image (Libsdl)
• Simple Directmedia Layer (Sam Lantinga And Mattias Engdegrd)

References

• https://security.gentoo.org/glsa/201903-17
• https://www.debian.org/security/2018/dsa-4177
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0498