cve/2019/CVE-2019-5059.md
2025-09-29 21:09:30 +02:00

954 B

CVE-2019-5059

Description

An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2_image 2.0.4. A specially crafted XPM image can cause an integer overflow, allocating too small of a buffer. This buffer can then be written out of bounds resulting in a heap overflow, ultimately ending in code execution. An attacker can display a specially crafted image to trigger this vulnerability.

POC

Reference

Github

No PoCs found on GitHub currently.