Alpine/sdl2_image: high 8.8
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An
Action: Upgrade sdl2_image to 2.0.2-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.2-r1 | - |
Fixed versions
| 2.0.2-r1 |
Sources
- osv: ALPINE-CVE-2017-14448#Alpine:v3.7/sdl2_image
- https://security.alpinelinux.org/vuln/CVE-2017-14448
published · modified · JSON