CVE-2026-35444 | libsdl-org SDL_image up to 762 XCF Image Parser src/IMG_xcf.c do_layer_surface out-of-bounds (GHSA-gq8w-x74c-h6p7 / Nessus ID 321864)

A vulnerability was found in . The impacted element is the function do_layer_surface of the file src/IMG_xcf.c of the component XCF Image Parser. The manipulation leads to out-of-bounds read.

This vulnerability is listed as CVE-2026-35444. The attack may be initiated remotely. There is no available exploit.

It is recommended to apply a patch to fix this issue.