Skip to content
8.8 High

CVE-2019-5057 An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2_image 2.0.4

Description

An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2_image 2.0.4. A specially crafted PCX image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
SDL Versions not published
The 4 CVEs of SDL →
Track this CVE