{
  "cveId": "CVE-2026-35444",
  "url": "https://patchblox.com/security/cve/CVE-2026-35444",
  "summary": "CVE-2026-35444 is fixed in 11 products on 1 platform, first by DEBIAN-CVE-2026-35444, released April 6, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "libsdl2-image: SDL_image is a library to load images of various formats as SDL surfaces",
  "description": "SDL_image is a library to load images of various formats as SDL surfaces. In do_layer_surface() in src/IMG_xcf.c, pixel index values from decoded XCF tile data are used directly as colormap indices without validating them against the colormap size (cm_num). A crafted .xcf file with a small colormap and out-of-range pixel indices causes heap out-of-bounds reads of up to 762 bytes past the colormap allocation. Both IMAGE_INDEXED code paths are affected (bpp=1 and bpp=2). The leaked heap bytes are written into the output surface pixel data, making them potentially observable in the rendered image. This vulnerability is fixed with commit 996bf12888925932daace576e09c3053410896f8.",
  "published": "2026-04-06T22:16:23Z",
  "severity": "medium",
  "cvss": 6.1,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
  "epss": 0.00266,
  "epssPercentile": 0.18657,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "SDL2_image",
      "release": "Fedora 43",
      "fixedVersion": "2.8.12-1.fc43",
      "fix": "FEDORA-2026-F1F87B465A",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-f1f87b465a",
      "released": "2026-05-10T09:11:22Z"
    },
    {
      "platform": "linux",
      "product": "SDL2_image-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "2.8.12-1.fc43",
      "fix": "FEDORA-2026-F1F87B465A",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-f1f87b465a",
      "released": "2026-05-10T09:11:22Z"
    },
    {
      "platform": "linux",
      "product": "SDL2_image-debugsource",
      "release": "Fedora 43",
      "fixedVersion": "2.8.12-1.fc43",
      "fix": "FEDORA-2026-F1F87B465A",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-f1f87b465a",
      "released": "2026-05-10T09:11:22Z"
    },
    {
      "platform": "linux",
      "product": "SDL2_image-devel",
      "release": "Fedora 43",
      "fixedVersion": "2.8.12-1.fc43",
      "fix": "FEDORA-2026-F1F87B465A",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-f1f87b465a",
      "released": "2026-05-10T09:11:22Z"
    },
    {
      "platform": "linux",
      "product": "libsdl2-image",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2.8.8\u002Bdfsg-1\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2026-35444",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-35444",
      "released": "2026-04-06T22:16:23Z"
    },
    {
      "platform": "linux",
      "product": "libsdl2-image",
      "release": "Debian 14",
      "fixedVersion": "2.8.10\u002Bdfsg-1",
      "fix": "DEBIAN-CVE-2026-35444",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-35444",
      "released": "2026-04-06T22:16:23Z"
    },
    {
      "platform": "linux",
      "product": "libsdl3-image",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "3.2.4\u002Bds-1\u002Bdeb13u1",
      "fix": "DEBIAN-CVE-2026-35444",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-35444",
      "released": "2026-04-06T22:16:23Z"
    },
    {
      "platform": "linux",
      "product": "libsdl3-image",
      "release": "Debian 14",
      "fixedVersion": "3.4.2\u002Bds-1",
      "fix": "DEBIAN-CVE-2026-35444",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-35444",
      "released": "2026-04-06T22:16:23Z"
    },
    {
      "platform": "linux",
      "product": "mingw-SDL2_image",
      "release": "Fedora 43",
      "fixedVersion": "2.8.12-1.fc43",
      "fix": "FEDORA-2026-BC38EBDF4C",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-bc38ebdf4c",
      "released": "2026-06-12T15:45:01Z"
    },
    {
      "platform": "linux",
      "product": "mingw32-SDL2_image",
      "release": "Fedora 43",
      "fixedVersion": "2.8.12-1.fc43",
      "fix": "FEDORA-2026-BC38EBDF4C",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-bc38ebdf4c",
      "released": "2026-06-12T15:45:01Z"
    },
    {
      "platform": "linux",
      "product": "mingw32-SDL2_image-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "2.8.12-1.fc43",
      "fix": "FEDORA-2026-BC38EBDF4C",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-bc38ebdf4c",
      "released": "2026-06-12T15:45:01Z"
    },
    {
      "platform": "linux",
      "product": "mingw64-SDL2_image",
      "release": "Fedora 43",
      "fixedVersion": "2.8.12-1.fc43",
      "fix": "FEDORA-2026-BC38EBDF4C",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-bc38ebdf4c",
      "released": "2026-06-12T15:45:01Z"
    },
    {
      "platform": "linux",
      "product": "mingw64-SDL2_image-debuginfo",
      "release": "Fedora 43",
      "fixedVersion": "2.8.12-1.fc43",
      "fix": "FEDORA-2026-BC38EBDF4C",
      "url": "https://patchblox.com/security/fix/linux/fedora-2026-bc38ebdf4c",
      "released": "2026-06-12T15:45:01Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}