Simple Directmedia Layer

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sam_lantinga_and_mattias_engdegård:simple_directmedia_layer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSam Lantinga And Mattias Engdegård (10466f4d-d418-58f1-9268-0f2aa33d60eb)
ProductSimple Directmedia Layer (c1054fed-d327-55f6-b26f-61e7040211f0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14450 vulnerable 2026-06-08 05:08:49.969360 Details available
HIGH (7.1)
A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-17T00:05:53.947Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14449 vulnerable 2026-06-08 05:08:49.968903 Details available
HIGH (7.5)
A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to trigger this vulnerability.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-16T19:56:21.232Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14448 vulnerable 2026-06-08 05:08:49.968465 Details available
HIGH (8.8)
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-17T04:13:49.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14442 vulnerable 2026-06-08 05:08:49.956406 Details available
HIGH (8.8)
An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2_image-2.0.2. A specially crafted BMP image can cause a stack overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-16T16:49:04.589Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14441 vulnerable 2026-06-08 05:08:49.955946 Details available
HIGH (8.8)
An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2_image-2.0.2. A specially crafted ICO image can cause an integer overflow, cascading to a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-17T04:05:12.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14440 vulnerable 2026-06-08 05:08:49.955261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12122 vulnerable 2026-06-08 05:08:45.320616 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.