« List of all CVEs

CVE-2017-14450

Published: 4/24/2018 Last updated: 9/17/2024 Reserved: 9/13/2017

A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability.

CNA assigner: talos (b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b) Requested by: n/a

Metrics

Version Score Severity Vector String
3.0 7.1 High CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Opam packages affected (2)

conf-sdl-image freetennis

Products affected (1)

Product Vendor Version
Simple DirectMedia Layer Sam Lantinga and Mattias Engdegård n/a

References (10)