CVE-2018-3977
libsdl-image1.2: An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3
CVE-2018-3977 is fixed in libsdl-image1.2 on 1 platform by libsdl-image1.2 1.2.12-8ubuntu0.1 (version 1.2.12-8ubuntu0.1), released October 14, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0348
89th percentile
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libsdl-image1.2 · Ubuntu 18.04.6 LTS (bionic) | 1.2.12-8ubuntu0.1 | libsdl-image1.2 1.2.12-8ubuntu0.1 | Oct 14, 2019 |