CVE-2019-5057

—

CVSS 3.1

8.8 high

EPSS

4%p89

Published

Jul 31, 2019 (Jul 31, 2019)

Modified

Jun 17, 2026

Description

An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2_image 2.0.4. A specially crafted PCX image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.

Vendors: libsdl opensuse
Products: sdl2 image, backports sle, leap
Weakness: CWE-122, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.6%)

In the news1 stories

Vulnerability Spotlight: Remote code execution vulnerabilities in Simple DirectMedia Layer

Cisco TalosJul 2, 17:05 UTC · Jul 2, 2019Vulnerability in the wildCVE-2019-5051 CVE-2019-5052 CVE-2019-5060+3 CVEs