Vulnerability Spotlight: Remote code execution vulnerabilities in Simple Direct Media Layer

Summary: Cisco Talos's Marcin Noga discovered two heap buffer overflow vulnerabilities in SDL2_image 2.0.4's PCX file loading function, tracked as CVE-2019-5051 and CVE-2019-5052, where a specially crafted image can trigger remote code execution. SDL released an update fixing those issues plus four additional vulnerabilities in XPM, XCF and PCX rendering, and Talos confirmed version 2.0.4 is affected.
Key Takeaway: The attack vector is an image file: a crafted PCX, XPM or XCF that a user simply displays can execute code, so any application embedding SDL2_image 2.0.4 inherits the exposure until it is patched.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2019-5051 CVE-2019-5052 CVE-2019-5057 CVE-2019-5058 CVE-2019-5059 CVE-2019-5060
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026