ISOMAN

CVE

CVE-2019-5052

An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4. A specially crafted file can cause an integer overflow, resulting in too little memory being allocated, which can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.

Severity
HIGH
CVSS
8.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html
  2. http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html
  3. http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html
  4. http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00030.html
  5. https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html
  6. https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html
  7. https://talosintelligence.com/vulnerability_reports/TALOS-2019-0821
  8. https://usn.ubuntu.com/4238-1/
  9. http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html
  10. http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html
  11. http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html
  12. http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00030.html
  13. https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html
  14. https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html
  15. https://talosintelligence.com/vulnerability_reports/TALOS-2019-0821
  16. https://usn.ubuntu.com/4238-1/