CVE-2019-5059: Integer Overflow
Published Jul 31, 2019
·Updated
An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2image 2.0.4. A specially crafted XPM image can cause an integer overflow, allocating too small of a buffer. This buffer can then be written out of bounds resulting in a heap overflow, ultimately ending in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
Affected Software
5 affected components
libSDL Sdl2 Image=2.0.4
openSUSE Backports SLE=15.0
openSUSE Backports SLE=15.0-sp1
openSUSE Leap=15.0
openSUSE Leap=15.1
Event History
Jul 31, 2019
CVE Published
via MITRE·04:50 PM
Data Sourced
via MITRE·04:50 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2019-5059.
2
What is the severity of CVE-2019-5059?
The severity of CVE-2019-5059 is high (8.8).
3
How does CVE-2019-5059 affect Libsdl Sdl2 Image?
CVE-2019-5059 affects Libsdl Sdl2 Image version 2.0.4.
4
Are there any patches or updates available for CVE-2019-5059?
Yes, patches and updates are available. Please refer to the provided references for more information.
5
What is the impact of CVE-2019-5059?
The impact of CVE-2019-5059 is the potential for code execution through a heap overflow.