TI-2026-27575 CVE-2026-35444
SDL_image has a heap buffer overflow READ via unchecked colormap index in XCF loader
Priority LOW 31
SDL_image is a library to load images of various formats as SDL surfaces.
Vulnerabilities
13 records
TI-2018-02945 CVE-2018-3977 · GHSA-9532-gqc7-9wv7
Out-of-bounds write in Simple DirectMedia Layer
Priority MEDIUM 44
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3.
TI-2017-10557 CVE-2017-14450 · GHSA-f8q9-fqg7-g33x
Memory corruption in Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer
Priority LOW 34
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2.
TI-2017-10556 CVE-2017-14449 · GHSA-xgp4-8gx6-q392
Double free in Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer
Priority MEDIUM 41
A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2.
TI-2017-10555 CVE-2017-14448 · GHSA-rrp4-84hf-vc2p
Out-of-bounds write in Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer
Priority MEDIUM 43
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2.
TI-2017-10549 CVE-2017-14442 · GHSA-p3xm-vpj8-m644
Memory corruption in Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer
Priority MEDIUM 43
An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2_image-2.0.2.
TI-2017-10548 CVE-2017-14441 · GHSA-fjmx-7p86-hg32
Integer overflow in Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer
Priority MEDIUM 43
An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2_image-2.0.2.
TI-2017-10547 CVE-2017-14440 · GHSA-9hhm-gpw6-h7cc
Out-of-bounds write in Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer
Priority MEDIUM 43
An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2.
TI-2017-08915 CVE-2017-12122 · GHSA-vmfr-6chp-w9mf
Out-of-bounds write in Sam Lantinga and Mattias Engdegård Simple DirectMedia Layer
Priority MEDIUM 43
An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2.
TI-2018-02809 CVE-2018-3839 · GHSA-g336-h8cj-mccg
Out-of-bounds write in Cisco Simple DirectMedia
Priority MEDIUM 43
An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2.
TI-2018-02808 CVE-2018-3838 · GHSA-mh87-4cjg-xvmr
Out-of-bounds read in Cisco Simple DirectMedia
Priority LOW 32
An exploitable information vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2.
TI-2018-02807 CVE-2018-3837 · GHSA-gwvh-mf23-368g
Out-of-bounds read in Cisco Simple Direct Media
Priority LOW 27
An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2.
TI-2017-02107 CVE-2017-2887 · GHSA-hqjw-c32v-frhh
Out-of-bounds write in Talos Simple Direct Media
Priority MEDIUM 43
An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL_image 2.0.1.