PT-2018-5642 · Sdl+2 · Sdl2 Image+2

CVE-2017-14441

·

Published

2018-03-18

·

Updated

2024-04-08

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: SDL2 image version 2.0.2
Description: A code execution issue exists in the ICO image rendering functionality. A specially crafted ICO image can cause an integer overflow, leading to a heap overflow and resulting in code execution. This can be triggered by displaying a specially crafted image.
Recommendations: For SDL2 image version 2.0.2, consider avoiding the use of ICO images until a patch is available. As a temporary workaround, restrict the rendering of ICO images to minimize the risk of exploitation.

Fix

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2018-3678
CVE-2017-14441
DLA-1341-1
DSA-4177-1
DSA-4184-1
MGASA-2018-0276
MGASA-2018-0454
OPENSUSE-SU-2018_0734-1
OPENSUSE-SU-2024:10608-1

Affected Products

Alt Linux
Sdl2 Image
Suse