Vulnerability Spotlight: Remote code execution vulnerabilities in Simple Direct Media Layer
Cisco Talos's Marcin Noga discovered two heap buffer overflow vulnerabilities in SDL2_image 2.0.4's PCX file loading function, tracked as CVE-2019-5051 and CVE-2019-5052, where a specially crafted image can trigger remote code execution. SDL released an...