Alpine/sdl2_image: high 8.8
An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4. A missing error handler can lead to a buffer overflow and potential code execution.
Action: Upgrade sdl2_image to 2.0.5-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.5-r0 | - |
Fixed versions
| 2.0.5-r0 |
Sources
- osv: ALPINE-CVE-2019-5051#Alpine:v3.8/sdl2_image
- https://security.alpinelinux.org/vuln/CVE-2019-5051
published · modified · JSON