CVE-2018-3977

Published: 2018-11-01T15:29Z

Last Modified: 2024-11-21T04:06Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt