CVE-2018-3977: Libsdl Sdl Image

High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days.

An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability.

Affected products

• Libsdl Sdl Image: version 2.0.3 only

Published 2018-11-01. Last modified 2026-06-17.