CVE-2019-5051CWE-390

An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4

High · published July 3, 2019

CVSS v3.0
8.8
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4. A missing error handler can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03969 · 90.4th percentile
Weakness
CWE-390 · Detection of Error Condition Without Action
Published
2019-07-03T18:43Z
EPSS history
Timeline
  • 03 JUL 18:43Z
    An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4
    cvelistv5