Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2018-3977
PUBLISHED
More InfoOfficial Page
Assigner-talos
Assigner Org ID-b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b
View Known Exploited Vulnerability (KEV) details
Published At-01 Nov, 2018 | 15:00
Updated At-17 Sep, 2024 | 02:33
Rejected At-
▼CVE Numbering Authority (CNA)

An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.

Affected Products
Vendor
Simple DirectMedia Layer
Product
Simple DirectMedia Layer
Versions
Affected
  • Simple DirectMedia Layer SDL2_image 2.0.3
Problem Types
TypeCWE IDDescription
textN/AHeap-based Buffer Overflow
Metrics
VersionBase scoreBase severityVector
3.08.8HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://security.gentoo.org/glsa/201903-17
vendor-advisory
x_refsource_GENTOO
https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html
mailing-list
x_refsource_MLIST
https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html
mailing-list
x_refsource_MLIST
https://usn.ubuntu.com/4238-1/
vendor-advisory
x_refsource_UBUNTU
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0645
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://security.gentoo.org/glsa/201903-17
vendor-advisory
x_refsource_GENTOO
x_transferred
https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html
mailing-list
x_refsource_MLIST
x_transferred
https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html
mailing-list
x_refsource_MLIST
x_transferred
https://usn.ubuntu.com/4238-1/
vendor-advisory
x_refsource_UBUNTU
x_transferred
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0645
x_refsource_MISC
x_transferred
Details not found