HIGH
An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2_image 2.0.4
Published Jul 31, 2019
8.8
HIGHCVSS 3.1
EPSS 3.62%
Description
An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2_image 2.0.4. A specially crafted PCX image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
Affected products
- Vendor n/a Product SDL Defaultn/a
- Version SDL_image 2.0.4StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | SDL | n/a |
|
Configuration 1
- 2.0.4
Configuration 2
OR
- 15.0
- 15.0
- 15.0
- 15.1
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (5)
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00030.html vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0841 x_refsource_MISCThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html | vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory | |
| http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html | vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory | |
| http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html | vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory | |
| http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00030.html | vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory | |
| https://talosintelligence.com/vulnerability_reports/TALOS-2019-0841 | x_refsource_MISCThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner talos
Published Jul 31, 2019
Updated Aug 4, 2024
Reserved Jan 4, 2019
Link CVE-2019-5057
CISA Vulnrichment
Updated n/a