CVE-2026-117557
Description
A flaw was found in SDL_image. By tricking a user or application into processing a specially crafted Interleaved Bitmap (ILBM) image file, an attacker can trigger an out-of-bounds read condition during image decoding. This can lead to a Denial of Service (DoS) by causing the application to crash, or potentially result in the disclosure of stack memory.
Statement
This vulnerability is rated as having a Moderate impact because exploitation requires user interaction to load an untrusted image file locally, limiting the attack surface to scenarios where client applications process arbitrary input. Although the out-of-bounds read can cause an application termination resulting in a denial of service or potentially leak stack memory, it does not allow arbitrary code execution or data modification. Additionally, SDL_image packages are not included in Red Hat Enterprise Linux core repositories, restricting risk to environments utilizing community repositories such as EPEL.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
