libsdl sdl2 image

Name: libsdl sdl2 image
Brand: libsdl

productUS

cpe:2.3:a:libsdl:sdl2_image:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical7high5medium0low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-5052US	high8.8	4.52% (91st)	—	no fix	2019-07-03	= 2.0.4
CVE-2019-5060US	high8.8	3.97% (90th)	—	no fix	2019-07-31	= 2.0.4
CVE-2019-5051US	high8.8	3.97% (90th)	—	no fix	2019-07-03	= 2.0.4
CVE-2019-5058US	high8.8	3.62% (89th)	—	no fix	2019-07-31	= 2.0.4
CVE-2019-5057US	high8.8	3.62% (89th)	—	no fix	2019-07-31	= 2.0.4
CVE-2019-5059US	high8.8	3.55% (89th)	—	no fix	2019-07-31	= 2.0.4
CVE-2019-12217US	medium6.5	2.27% (83rd)	—	no fix	2019-05-20	= 2.0.4
CVE-2019-12216US	medium6.5	2.21% (83rd)	—	no fix	2019-05-20	= 2.0.4
CVE-2019-12219US	high8.8	2.00% (81st)	—	no fix	2019-05-20	= 2.0.4
CVE-2019-12221US	medium6.5	1.96% (80th)	—	no fix	2019-05-20	= 2.0.4
CVE-2019-12218US	medium6.5	1.96% (80th)	—	no fix	2019-05-20	= 2.0.4
CVE-2019-12220US	medium6.5	1.87% (79th)	—	no fix	2019-05-20	= 2.0.4

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write7 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-390Detection of Error Condition Without Action1 CVEs
CWE-415Double Free1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.