60
CVE-2017-14448
—CVSS 3.1
8.8 high
EPSS
2%p83
Published
()
Modified
Description
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.2. A specially crafted XCF image can cause a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.