CVE-2019-5051
published 2019-07-03CVE-2019-5051: An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4. A missing error handler can lead to a…
high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4. A missing error handler can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | libsdl2-image | < libsdl2-image 2.0.5+dfsg1-1 (bookworm) | libsdl2-image 2.0.5+dfsg1-1 (bookworm) |
| debian | sdl-image1.2 | < libsdl2-image 2.0.5+dfsg1-1 (bookworm) | libsdl2-image 2.0.5+dfsg1-1 (bookworm) |
| libsdl | sdl2_image | — | — |
| opensuse | backports_sle | — | — |
| opensuse | leap | — | — |
| opensuse | leap | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH