CVE-2019-5058 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-5058 Interim 1 21 2025-02-17T02:20:00Z current 2021-05-30T14:23:02Z 2025-02-17T02:20:00Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-5058 An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image 2.0.4. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H6CP3W3YJYYFIAMX7CDOYPH65QZMBRGD/#H6CP3W3YJYYFIAMX7CDOYPH65QZMBRGD E-Mail link for openSUSE-SU-2019:2070-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3QX7GXNBMMTXZSXQVKMIC4P6EVVZNDRA/#3QX7GXNBMMTXZSXQVKMIC4P6EVVZNDRA E-Mail link for openSUSE-SU-2019:2071-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/L64IV5QDMXKI6JPESXNTCMESEKNUADR2/#L64IV5QDMXKI6JPESXNTCMESEKNUADR2 E-Mail link for openSUSE-SU-2019:2108-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LT2L2SUT2SJMJ23HFEUSMEN3PCAFI5LM/#LT2L2SUT2SJMJ23HFEUSMEN3PCAFI5LM E-Mail link for openSUSE-SU-2019:2109-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Package Hub 15 SUSE Package Hub 15 SP1 openSUSE Leap 15.0 openSUSE Leap 15.1 openSUSE Leap 15.2 openSUSE Tumbleweed libSDL2_image-2_0-0-2.0.5-1.14 libSDL2_image-2_0-0-2.0.5-bp150.3.6.1 libSDL2_image-2_0-0-2.0.5-bp151.4.3.1 libSDL2_image-2_0-0-2.0.5-lp150.9.1 libSDL2_image-2_0-0-2.0.5-lp151.2.5.1 libSDL2_image-2_0-0-2.0.5-lp152.1.6 libSDL2_image-2_0-0-32bit-2.0.5-1.14 libSDL2_image-2_0-0-32bit-2.0.5-lp150.9.1 libSDL2_image-2_0-0-32bit-2.0.5-lp151.2.5.1 libSDL2_image-2_0-0-64bit-2.0.5-bp150.3.6.1 libSDL2_image-2_0-0-64bit-2.0.5-bp151.4.3.1 libSDL2_image-devel-2.0.5-1.14 libSDL2_image-devel-2.0.5-bp150.3.6.1 libSDL2_image-devel-2.0.5-bp151.4.3.1 libSDL2_image-devel-2.0.5-lp150.9.1 libSDL2_image-devel-2.0.5-lp151.2.5.1 libSDL2_image-devel-32bit-2.0.5-1.14 libSDL2_image-devel-32bit-2.0.5-lp150.9.1 libSDL2_image-devel-32bit-2.0.5-lp151.2.5.1 libSDL2_image-devel-64bit-2.0.5-bp150.3.6.1 libSDL2_image-devel-64bit-2.0.5-bp151.4.3.1 libSDL_image-1_2-0-1.2.12+hg695-1.12 libSDL_image-1_2-0-1.2.12+hg695-bp150.3.3.1 libSDL_image-1_2-0-1.2.12+hg695-bp151.4.3.1 libSDL_image-1_2-0-1.2.12+hg695-lp150.2.3.1 libSDL_image-1_2-0-1.2.12+hg695-lp151.3.3.1 libSDL_image-1_2-0-32bit-1.2.12+hg695-1.12 libSDL_image-1_2-0-32bit-1.2.12+hg695-lp150.2.3.1 libSDL_image-1_2-0-32bit-1.2.12+hg695-lp151.3.3.1 libSDL_image-1_2-0-64bit-1.2.12+hg695-bp150.3.3.1 libSDL_image-1_2-0-64bit-1.2.12+hg695-bp151.4.3.1 libSDL_image-devel-1.2.12+hg695-1.12 libSDL_image-devel-1.2.12+hg695-bp150.3.3.1 libSDL_image-devel-1.2.12+hg695-bp151.4.3.1 libSDL_image-devel-1.2.12+hg695-lp150.2.3.1 libSDL_image-devel-1.2.12+hg695-lp151.3.3.1 libSDL_image-devel-32bit-1.2.12+hg695-1.12 libSDL_image-devel-32bit-1.2.12+hg695-lp150.2.3.1 libSDL_image-devel-32bit-1.2.12+hg695-lp151.3.3.1 libSDL_image-devel-64bit-1.2.12+hg695-bp150.3.3.1 libSDL_image-devel-64bit-1.2.12+hg695-bp151.4.3.1 libSDL2_image-2_0-0-2.0.5-bp150.3.6.1 as a component of SUSE Package Hub 15 libSDL2_image-2_0-0-64bit-2.0.5-bp150.3.6.1 as a component of SUSE Package Hub 15 libSDL2_image-devel-2.0.5-bp150.3.6.1 as a component of SUSE Package Hub 15 libSDL2_image-devel-64bit-2.0.5-bp150.3.6.1 as a component of SUSE Package Hub 15 libSDL_image-1_2-0-1.2.12+hg695-bp150.3.3.1 as a component of SUSE Package Hub 15 libSDL_image-1_2-0-64bit-1.2.12+hg695-bp150.3.3.1 as a component of SUSE Package Hub 15 libSDL_image-devel-1.2.12+hg695-bp150.3.3.1 as a component of SUSE Package Hub 15 libSDL_image-devel-64bit-1.2.12+hg695-bp150.3.3.1 as a component of SUSE Package Hub 15 libSDL2_image-2_0-0-2.0.5-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 libSDL2_image-2_0-0-64bit-2.0.5-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 libSDL2_image-devel-2.0.5-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 libSDL2_image-devel-64bit-2.0.5-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 libSDL_image-1_2-0-1.2.12+hg695-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 libSDL_image-1_2-0-64bit-1.2.12+hg695-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 libSDL_image-devel-1.2.12+hg695-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 libSDL_image-devel-64bit-1.2.12+hg695-bp151.4.3.1 as a component of SUSE Package Hub 15 SP1 libSDL2_image-2_0-0-2.0.5-lp150.9.1 as a component of openSUSE Leap 15.0 libSDL2_image-2_0-0-32bit-2.0.5-lp150.9.1 as a component of openSUSE Leap 15.0 libSDL2_image-devel-2.0.5-lp150.9.1 as a component of openSUSE Leap 15.0 libSDL2_image-devel-32bit-2.0.5-lp150.9.1 as a component of openSUSE Leap 15.0 libSDL_image-1_2-0-1.2.12+hg695-lp150.2.3.1 as a component of openSUSE Leap 15.0 libSDL_image-1_2-0-32bit-1.2.12+hg695-lp150.2.3.1 as a component of openSUSE Leap 15.0 libSDL_image-devel-1.2.12+hg695-lp150.2.3.1 as a component of openSUSE Leap 15.0 libSDL_image-devel-32bit-1.2.12+hg695-lp150.2.3.1 as a component of openSUSE Leap 15.0 libSDL2_image-2_0-0-2.0.5-lp151.2.5.1 as a component of openSUSE Leap 15.1 libSDL2_image-2_0-0-32bit-2.0.5-lp151.2.5.1 as a component of openSUSE Leap 15.1 libSDL2_image-devel-2.0.5-lp151.2.5.1 as a component of openSUSE Leap 15.1 libSDL2_image-devel-32bit-2.0.5-lp151.2.5.1 as a component of openSUSE Leap 15.1 libSDL_image-1_2-0-1.2.12+hg695-lp151.3.3.1 as a component of openSUSE Leap 15.1 libSDL_image-1_2-0-32bit-1.2.12+hg695-lp151.3.3.1 as a component of openSUSE Leap 15.1 libSDL_image-devel-1.2.12+hg695-lp151.3.3.1 as a component of openSUSE Leap 15.1 libSDL_image-devel-32bit-1.2.12+hg695-lp151.3.3.1 as a component of openSUSE Leap 15.1 libSDL2_image-2_0-0-2.0.5-lp152.1.6 as a component of openSUSE Leap 15.2 libSDL2_image-2_0-0-2.0.5-1.14 as a component of openSUSE Tumbleweed libSDL2_image-2_0-0-32bit-2.0.5-1.14 as a component of openSUSE Tumbleweed libSDL2_image-devel-2.0.5-1.14 as a component of openSUSE Tumbleweed libSDL2_image-devel-32bit-2.0.5-1.14 as a component of openSUSE Tumbleweed libSDL_image-1_2-0-1.2.12+hg695-1.12 as a component of openSUSE Tumbleweed libSDL_image-1_2-0-32bit-1.2.12+hg695-1.12 as a component of openSUSE Tumbleweed libSDL_image-devel-1.2.12+hg695-1.12 as a component of openSUSE Tumbleweed libSDL_image-devel-32bit-1.2.12+hg695-1.12 as a component of openSUSE Tumbleweed An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image 2.0.4. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability. CVE-2019-5058 SUSE Package Hub 15:libSDL2_image-2_0-0-2.0.5-bp150.3.6.1 SUSE Package Hub 15:libSDL2_image-2_0-0-64bit-2.0.5-bp150.3.6.1 SUSE Package Hub 15:libSDL2_image-devel-2.0.5-bp150.3.6.1 SUSE Package Hub 15:libSDL2_image-devel-64bit-2.0.5-bp150.3.6.1 SUSE Package Hub 15:libSDL_image-1_2-0-1.2.12+hg695-bp150.3.3.1 SUSE Package Hub 15:libSDL_image-1_2-0-64bit-1.2.12+hg695-bp150.3.3.1 SUSE Package Hub 15:libSDL_image-devel-1.2.12+hg695-bp150.3.3.1 SUSE Package Hub 15:libSDL_image-devel-64bit-1.2.12+hg695-bp150.3.3.1 SUSE Package Hub 15 SP1:libSDL2_image-2_0-0-2.0.5-bp151.4.3.1 SUSE Package Hub 15 SP1:libSDL2_image-2_0-0-64bit-2.0.5-bp151.4.3.1 SUSE Package Hub 15 SP1:libSDL2_image-devel-2.0.5-bp151.4.3.1 SUSE Package Hub 15 SP1:libSDL2_image-devel-64bit-2.0.5-bp151.4.3.1 SUSE Package Hub 15 SP1:libSDL_image-1_2-0-1.2.12+hg695-bp151.4.3.1 SUSE Package Hub 15 SP1:libSDL_image-1_2-0-64bit-1.2.12+hg695-bp151.4.3.1 SUSE Package Hub 15 SP1:libSDL_image-devel-1.2.12+hg695-bp151.4.3.1 SUSE Package Hub 15 SP1:libSDL_image-devel-64bit-1.2.12+hg695-bp151.4.3.1 openSUSE Leap 15.0:libSDL2_image-2_0-0-2.0.5-lp150.9.1 openSUSE Leap 15.0:libSDL2_image-2_0-0-32bit-2.0.5-lp150.9.1 openSUSE Leap 15.0:libSDL2_image-devel-2.0.5-lp150.9.1 openSUSE Leap 15.0:libSDL2_image-devel-32bit-2.0.5-lp150.9.1 openSUSE Leap 15.0:libSDL_image-1_2-0-1.2.12+hg695-lp150.2.3.1 openSUSE Leap 15.0:libSDL_image-1_2-0-32bit-1.2.12+hg695-lp150.2.3.1 openSUSE Leap 15.0:libSDL_image-devel-1.2.12+hg695-lp150.2.3.1 openSUSE Leap 15.0:libSDL_image-devel-32bit-1.2.12+hg695-lp150.2.3.1 openSUSE Leap 15.1:libSDL2_image-2_0-0-2.0.5-lp151.2.5.1 openSUSE Leap 15.1:libSDL2_image-2_0-0-32bit-2.0.5-lp151.2.5.1 openSUSE Leap 15.1:libSDL2_image-devel-2.0.5-lp151.2.5.1 openSUSE Leap 15.1:libSDL2_image-devel-32bit-2.0.5-lp151.2.5.1 openSUSE Leap 15.1:libSDL_image-1_2-0-1.2.12+hg695-lp151.3.3.1 openSUSE Leap 15.1:libSDL_image-1_2-0-32bit-1.2.12+hg695-lp151.3.3.1 openSUSE Leap 15.1:libSDL_image-devel-1.2.12+hg695-lp151.3.3.1 openSUSE Leap 15.1:libSDL_image-devel-32bit-1.2.12+hg695-lp151.3.3.1 openSUSE Leap 15.2:libSDL2_image-2_0-0-2.0.5-lp152.1.6 openSUSE Tumbleweed:libSDL2_image-2_0-0-2.0.5-1.14 openSUSE Tumbleweed:libSDL2_image-2_0-0-32bit-2.0.5-1.14 openSUSE Tumbleweed:libSDL2_image-devel-2.0.5-1.14 openSUSE Tumbleweed:libSDL2_image-devel-32bit-2.0.5-1.14 openSUSE Tumbleweed:libSDL_image-1_2-0-1.2.12+hg695-1.12 openSUSE Tumbleweed:libSDL_image-1_2-0-32bit-1.2.12+hg695-1.12 openSUSE Tumbleweed:libSDL_image-devel-1.2.12+hg695-1.12 openSUSE Tumbleweed:libSDL_image-devel-32bit-1.2.12+hg695-1.12 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H