Lucene search

K
osvGoogleOSV:CVE-2017-14441
HistoryApr 24, 2018 - 7:29 p.m.

CVE-2017-14441

2018-04-2419:29:01
Google
osv.dev
7

0.005 Low

EPSS

Percentile

77.0%

An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2_image-2.0.2. A specially crafted ICO image can cause an integer overflow, cascading to a heap overflow resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.