CVE-2017-14448

Name of the Vulnerable Software and Affected Versions: SDL2 image version 2.0.2

Description: A code execution issue exists in the XCF image rendering functionality. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can trigger this issue by displaying a specially crafted image.

Recommendations: For SDL2 image version 2.0.2, consider avoiding the use of XCF image rendering functionality until a patch is available. As a temporary workaround, restrict the display of XCF images to minimize the risk of exploitation.