Approved changes feed: RSS · Atom
cpe:2.3:a:libsdl:sdl_image:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Libsdl (15ba1fd9-5345-5b79-a8c3-e6c30d52c45b) |
|---|---|
| Product | Sdl Image (e9694716-07ab-50dc-98a7-c51a3226bccd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/libsdl-org/sdl_image |
purl2cpe | 2026-06-01 10:17:37.246942 |
pkg:rpm/fedora/sdl_image |
purl2cpe | 2026-06-01 10:17:37.246945 |
pkg:rpm/opensuse/sdl_image |
purl2cpe | 2026-06-01 10:17:37.246948 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-35444 |
vulnerable | 2026-06-08 07:59:14.009468 |
SDL_image has a heap buffer overflow READ via unchecked colormap index in XCF loader
HIGH (7.1)
SDL_image is a library to load images of various formats as SDL surfaces. In do_layer_surface() in src/IMG_xcf.c, pixel index values from decoded XCF tile data are used directly as colormap indices without validating them against the colormap size (cm_num). A crafted .xcf file with a small colormap and out-of-range pixel indices causes heap out-of-bounds reads of up to 762 bytes past the colormap allocation. Both IMAGE_INDEXED code paths are affected (bpp=1 and bpp=2). The leaked heap bytes are written into the output surface pixel data, making them potentially observable in the rendered image. This vulnerability is fixed with commit 996bf12888925932daace576e09c3053410896f8.
Published: 2026-04-06T21:44:05.986Z
Updated: 2026-04-08T14:06:28.528Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.