Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-0544

27
FAUCET Score

CVE-2008-0544 describes a heap-based buffer overflow in the IMG_LoadLBM_RW function within SDL_image versions prior to 1.2.7, affecting products that utilize this library. This critical vulnerability, with a CVSS score of 10.0, allows unauthenticated remote attackers to trigger a denial of service or potentially execute arbitrary code by supplying a specially crafted IFF ILBM file. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, its high FAUCET Risk Score of 89/100 indicates a severe potential impact if exploited.

Impacted Technologies

VendorProductVersion(s)CPE
1.2.6CPE matchmatch criteria
cpe:2.3:a:sdl:sdl_image:1.2.6:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

10.0HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
7.93%
Probability of exploitation in next 30 days
EPSS Percentile
94.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0793 is in the 90th percentile among its peer group of 51,485 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2008-0544Moderate

SDL_image: ILBM image handlig buffer overflow

Jan 24, 2008

References

bugs.gentoo.org / show_bug.cgi
secunia.com / advisories/28640
Vendor Advisory
secunia.com / advisories/28752
secunia.com / advisories/28830
secunia.com / advisories/28850
secunia.com / advisories/28869
secunia.com / advisories/29542
exchange.xforce.ibmcloud.com / vulnerabilities/39899
issues.rpath.com / browse/RPL-2206
redhat.com / archives/fedora-package-announce/2008-February/msg00008.html
redhat.com / archives/fedora-package-announce/2008-February/msg00039.html
wiki.rpath.com / Advisories:rPSA-2008-0061
debian.org / security/2008/dsa-1493
gentoo.org / security/en/glsa/glsa-200802-01.xml
libsdl.org / cgi/viewvc.cgi/trunk/SDL_image/IMG_lbm.c
Exploit
libsdl.org / cgi/viewvc.cgi/trunk/SDL_image/IMG_lbm.c
Exploit
mandriva.com / security/advisories
securityfocus.com / archive/1/488079/100/0/threaded
securityfocus.com / bid/27435
ubuntu.com / usn/usn-595-1
vupen.com / english/advisories/2008/0266