Talos is disclosing two vulnerabilities that have been identified in the Simple DirectMedia Layer library. The library is a cross-platform development library designed for use in video playback software, emulators, and games. It also has the capability to handle various image formats such as XCF, the default layered image format for GIMP. An attacker could compromise a user by exploiting one of these vulnerabilities via a specifically crafted file that SDL would handle, such as a XCF file. An integer overflow vulnerability has been identified which could lead to arbitrary code execution on an affected host.”]
Source: https://blog.talosintelligence.com/2017/10/sdl-vulnerabilities.html