SDL_image vulnerabilities

CVEs whose affected-version data names the SDL_image package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-117557Medium· 6.1

1w ago

SDL_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds Read in ILBM Loader

SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM mode is set. Attackers can supply a crafted ILBM file with mo…

▾ Sunlitlibsdl-org · SDL_imagevia CVEORG