Approved changes feed: RSS · Atom
cpe:2.3:a:libsdl-org:sdl_image:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Libsdl Org (25830ef7-ac19-5f41-a357-4c46fd89adbb) |
|---|---|
| Product | Sdl Image (951c3bfa-fed1-5d7b-bcd9-b0f8299dc318) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-117557 |
vulnerable | 2026-11-03 10:15:34.237306 |
SDL_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds Read in ILBM Loader
MEDIUM (6.1)
SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM mode is set. Attackers can supply a crafted ILBM file with more than 8 HAM bitplanes to read past the colormap stack array, causing crashes or disclosing stack memory.
Published: 2026-10-27T13:07:52.419Z
Updated: 2026-11-04T16:52:35.775Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35444 |
vulnerable | 2026-06-08 07:59:14.008662 |
SDL_image has a heap buffer overflow READ via unchecked colormap index in XCF loader
HIGH (7.1)
SDL_image is a library to load images of various formats as SDL surfaces. In do_layer_surface() in src/IMG_xcf.c, pixel index values from decoded XCF tile data are used directly as colormap indices without validating them against the colormap size (cm_num). A crafted .xcf file with a small colormap and out-of-range pixel indices causes heap out-of-bounds reads of up to 762 bytes past the colormap allocation. Both IMAGE_INDEXED code paths are affected (bpp=1 and bpp=2). The leaked heap bytes are written into the output surface pixel data, making them potentially observable in the rendered image. This vulnerability is fixed with commit 996bf12888925932daace576e09c3053410896f8.
Published: 2026-04-06T21:44:05.986Z
Updated: 2026-04-08T14:06:28.528Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.