PT-2026-30586 · Sdl Image · Sdl Image

Sebasteuo · Published 2026-04-05 · Updated 2026-04-07 · CVE-2026-35444

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions SDL image (affected versions not specified)

Description The SDL image library has an issue where pixel index values from decoded XCF tile data are used directly as colormap indices without validation against the colormap size. A crafted .xcf file with a small colormap and out-of-range pixel indices can cause heap out-of-bounds reads of up to 762 bytes past the colormap allocation. Both IMAGE INDEXED code paths are affected (bpp=1 and bpp=2). The leaked heap bytes are written into the output surface pixel data, potentially making them observable in the rendered image.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-35444

OPENSUSE-SU-2026:10493-1

OPENSUSE-SU-2026:10494-1

Affected Products

Sdl Image

References · 14

• https://github.com/libsdl-org/SDL_image/security/advisories/GHSA-gq8w-x74c-h6p7 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-35444 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10494-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-35444 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-35444 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-35444 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10493-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35444 · Security Note
• https://ubuntu.com/security/CVE-2026-35444 · Vendor Advisory
• https://github.com/libsdl-org/SDL_image/commit/996bf12888925932daace576e09c3053410896f8 · Note
• https://github.com/libsdl-org/SDL_image/commit/a1a06276a51ca7e6e63908b200df8a278d8c5039 · Note
• https://github.com/libsdl-org/SDL_image/commit/678ac6a4c6021853485050926f45db08ba6aec48 · Note
• https://suse.com/security/cve/CVE-2026-35444 · Note
• https://twitter.com/CVEnew/status/2041282867163230548 · Twitter Post