CVE-2017-14450

A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability.

Score

CVSS 3.0 7.1 High

Status

Modified - talos-cna@cisco.com

Published

2018-04-24

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• Debian Linux (Debian)
• Sdl Image (Libsdl)
• Simple Directmedia Layer (Sam Lantinga And Mattias Engdegrd)

References

• https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html
• https://security.gentoo.org/glsa/201903-17
• https://www.debian.org/security/2018/dsa-4177
• https://www.debian.org/security/2018/dsa-4184
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0499