« List of all CVEs

CVE-2017-14449

Published: 4/24/2018 Last updated: 9/16/2024 Reserved: 9/13/2017

A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to trigger this vulnerability.

CNA assigner: talos (b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b) Requested by: n/a

Metrics

Version Score Severity Vector String
3.0 7.5 High CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Opam packages affected (2)

conf-sdl-image freetennis

Products affected (1)

Product Vendor Version
Simple DirectMedia Layer Sam Lantinga and Mattias Engdegård QCA6584AU

References (6)