GCVE - cpe:2.3:a:libsdl:sdl_image:2.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:libsdl:sdl_image:2.0.2:*:*:*:*:*:*:*

part: a version: 2.0.2 update: *

Vendor	Libsdl (`15ba1fd9-5345-5b79-a8c3-e6c30d52c45b`)
Product	Sdl Image (`e9694716-07ab-50dc-98a7-c51a3226bccd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/libsdl-org/sdl_image`	purl2cpe	2026-06-01 10:17:37.246972
`pkg:rpm/fedora/sdl_image`	purl2cpe	2026-06-01 10:17:37.246973
`pkg:rpm/opensuse/sdl_image`	purl2cpe	2026-06-01 10:17:37.246975

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-3839`	vulnerable	2026-06-08 05:11:41.338274	Details available HIGH (7.5) An exploitable code execution vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted XCF image can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. Published: 2018-04-10T21:00:00.000Z Updated: 2024-09-16T22:57:08.509Z Open on db.gcve.eu Reference links https://www.debian.org/security/2018/dsa-4177 https://www.debian.org/security/2018/dsa-4184 https://security.gentoo.org/glsa/201903-17 https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0521 https://www.starwindsoftware.com/security/sw-20191008-0002/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-3838`	vulnerable	2026-06-08 05:11:41.337784	Details available MEDIUM (5.3) An exploitable information vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted XCF image can cause an out-of-bounds read on the heap, resulting in information disclosure. An attacker can display a specially crafted image to trigger this vulnerability. Published: 2018-04-10T21:00:00.000Z Updated: 2024-09-16T18:44:14.602Z Open on db.gcve.eu Reference links https://www.debian.org/security/2018/dsa-4177 https://www.debian.org/security/2018/dsa-4184 https://security.gentoo.org/glsa/201903-17 https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0520	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-3837`	vulnerable	2026-06-08 05:11:41.334162	Details available MEDIUM (5.3) An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted PCX image can cause an out-of-bounds read on the heap, resulting in information disclosure . An attacker can display a specially crafted image to trigger this vulnerability. Published: 2018-04-10T21:00:00.000Z Updated: 2024-09-16T17:58:09.920Z Open on db.gcve.eu Reference links https://www.debian.org/security/2018/dsa-4177 https://www.debian.org/security/2018/dsa-4184 https://security.gentoo.org/glsa/201903-17 https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0519 https://www.starwindsoftware.com/security/sw-20191008-0001/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14450`	vulnerable	2026-06-08 05:08:49.969388	Details available HIGH (7.1) A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this vulnerability. Published: 2018-04-24T19:00:00.000Z Updated: 2024-09-17T00:05:53.947Z Open on db.gcve.eu Reference links https://www.debian.org/security/2018/dsa-4177 https://lists.debian.org/debian-lts-announce/2018/04/msg00005.html https://www.debian.org/security/2018/dsa-4184 https://security.gentoo.org/glsa/201903-17 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0499	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14449`	vulnerable	2026-06-08 05:08:49.968935	Details available HIGH (7.5) A double-Free vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to trigger this vulnerability. Published: 2018-04-24T19:00:00.000Z Updated: 2024-09-16T19:56:21.232Z Open on db.gcve.eu Reference links https://www.debian.org/security/2018/dsa-4177 https://security.gentoo.org/glsa/201903-17 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0498	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14448`	vulnerable	2026-06-08 05:08:49.968503	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14442`	vulnerable	2026-06-08 05:08:49.956433	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14441`	vulnerable	2026-06-08 05:08:49.955975	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-14440`	vulnerable	2026-06-08 05:08:49.955295	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-12122`	vulnerable	2026-06-08 05:08:45.321524	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.