PoC Index85,100 CVEs with PoCs

CVE-2019-5051

HIGH 8.8EPSS 4.0%

An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4. A missing error handler can lead to a buffer overflow and potential code execution. An attacker can provide a specially crafted image file to trigger this vulnerability.

Affected
Simple DirectMedia
CVSS v3.1 NVD
8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v3.0 CISCO
8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v2.0 NVD
6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
3.97% chance of exploitation in the next 30 days, 90th percentile
Published
2019-07-03
Updated
2024-08-04

Proof-of-concept exploits (1)

Security advisories

References