VDB
GCVE-VVD-MAGEIA-2017-398
GCVE-VVD-MAGEIA-2017-398
Advisory Published
Yves Younan of Cisco Talos discovered an exploitable integer overflow
vulnerability when creating a new RGB Surface in SDL 2.0.x before
version 2.0.7. A specially crafted file can cause an integer overflow
resulting in too little memory being allocated which can lead to a
buffer overflow and potential code execution. An attacker can provide a
specially crafted image file to trigger this vulnerability
(CVE-2017-2888).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | sdl2 | 0 (affected), 2.0.5-2.1.mga6 (unaffected) | — |
| Mageia | sdl2 | 0 (affected), 2.0.3-4.1.mga5 (unaffected) | — |
| Mageia | mingw-SDL2 | 0 (affected), 2.0.5-1.mga6 (unaffected) | — |
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.