CVE-2019-5057: High severity sdl2_image vulnerability

Published Jul 31, 2019

Updated

An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2image 2.0.4. A specially crafted PCX image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.

Affected Software

5 affected components

libSDL Sdl2 Image=2.0.4

openSUSE Backports SLE=15.0

openSUSE Backports SLE=15.0-sp1

openSUSE Leap=15.0

openSUSE Leap=15.1

Event History

Jul 31, 2019

CVE Published

via MITRE·04:48 PM

Data Sourced

via MITRE·04:48 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2019-5057?

CVE-2019-5057 is an exploitable code execution vulnerability in the PCX image-rendering functionality of SDL2_image 2.0.4.

How does CVE-2019-5057 work?

An attacker can display a specially crafted PCX image to trigger a heap overflow, resulting in code execution.

What is the severity of CVE-2019-5057?

CVE-2019-5057 has a severity rating of 8.8, which is considered high.

Which software versions are affected by CVE-2019-5057?

SDL2_image 2.0.4, openSUSE Backports SLE 15.0, openSUSE Backports SLE 15.0-sp1, openSUSE Leap 15.0, and openSUSE Leap 15.1 are affected.

How can I fix CVE-2019-5057?

Update to a patched version of SDL2_image or apply the necessary patches provided by the vendors.