Vulnetix
Try Vulnetix Request Demo
CVE-2018-3837 PUBLISHED

An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted PCX image can cause an out-of-bounds read on the heap, resulting in information disclosure . An attacker can display a specially crafted image to trigger this vulnerability.

EPSS 0.35% · 57.5th percentile

Risk Scores

EPSS Score
0.35%
57.5th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSsdl-image1.21.2.12-5build2, 0, 1.2.12-4ubuntu1
Ubuntu:16.04:LTSlibsdl2-image0, 2.0.1+dfsg-2, 2.0.1+dfsg-1
Ubuntu:16.04:LTSsdl-image1.21.2.12-5build2, 0
Ubuntu:14.04:LTSlibsdl2-image2.0.0+dfsg-3, 2.0.0+dfsg-2, 0

Timeline

References

Open in Interactive Console →