Threats affecting pkg:github/libsdl-org/SDL_image

SDL_image versions up to 2.8.12 and 3.4.8 contain a stack out-of-bounds read vulnerability in the IMG_LoadLBM_IO() function. This occurs due to missing validation of the bitplane count when HAM mode is enabled, allowing crafted ILBM files with excessive HAM bitplanes to cause memory disclosure or crashes.