Back to CVE Browser

CVE-2008-0544

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1090%

EPSS Percentile5.27th

PublishedFeb 1, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

Heap-based buffer overflow in the IMG_LoadLBM_RW function in IMG_lbm.c in SDL_image before 1.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted IFF ILBM file. NOTE: some of these details are obtained from third party information.

Affected Platforms (CPE)

📦

Sdl

Sdl Image

= 1.2.6

References & Advisories

🔗 http://bugs.gentoo.org/show_bug.cgi?id=207933

🔗 http://secunia.com/advisories/28640

🔗 http://secunia.com/advisories/28752

🔗 http://secunia.com/advisories/28830

🔗 http://secunia.com/advisories/28850

🔗 http://secunia.com/advisories/28869

🔗 http://secunia.com/advisories/29542

🔗 http://wiki.rpath.com/Advisories:rPSA-2008-0061

Related Vulnerabilities

CVE-2019-149069.8

A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affec...

CVE-2017-28878.8

An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL_image 2.0.1. A specially cra...

CVE-2017-28888.8

An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can ca...

CVE-2019-122198.8

An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2...