Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Simple_directmedia_layer
(Libsdl)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 26 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2021-01-19 | CVE-2020-14409 | SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file. | Debian_linux, Fedora, Simple_directmedia_layer, Starwind_virtual_san | 7.8 | ||
| 2021-01-19 | CVE-2020-14410 | SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file. | Debian_linux, Fedora, Simple_directmedia_layer | 5.4 | ||
| 2022-04-01 | CVE-2021-33657 | There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution. | Simple_directmedia_layer | 8.8 | ||
| 2022-07-28 | CVE-2022-34568 | SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c. | Simple_directmedia_layer | 7.5 | ||
| 2023-01-12 | CVE-2022-4743 | A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected. | Simple_directmedia_layer, Enterprise_linux | 7.5 | ||
| 2019-02-07 | CVE-2019-7572 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c. | Ubuntu_linux, Debian_linux, Fedora, Simple_directmedia_layer, Leap | 8.8 |