Today, Talos is disclosing two vulnerabilities that have been determined in the Straightforward DirectMedia Layer library. Straightforward DirectMedia Layer (SDL) is a cross-platform enhancement library designed for use in video playback software program, emulators, and video games by delivering reduced amount obtain to audio, keyboard, mouse, joystick, and graphics components. SDL, by means of its SDL_image library, also has the functionality to take care of many image formats such as XCF, the default layered image structure for GIMP.
An attacker could compromise a consumer by exploiting 1 of these vulnerabilities by means of a precisely crafted file that SDL would take care of, such as a XCF file.
Provided that various programs make use of SDL, Talos has coordinated with the SDL community to disclose these vulnerabilities and guarantee that an up to date version of the library is readily available to use.
Read through much more »