Medium severity6.5NVD Advisory· Published May 20, 2019· Updated Jun 17, 2026
CVE-2019-12221
CVE-2019-12221
Description
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a SEGV in the SDL function SDL_free_REAL at stdlib/SDL_malloc.c.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
18- cpe:2.3:a:libsdl:sdl2_image:2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:libsdl:simple_directmedia_layer:2.0.9:*:*:*:*:*:*:*
cpe:2.3:a:opensuse:backports_sle:15.0:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:opensuse:backports_sle:15.0:-:*:*:*:*:*:*
- cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*+ 1 more
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
- SDL/Simple DirectMedia Layerdescription
- Range: =2.0.9
- Range: =2.0.4
- osv-coords4 versionspkg:rpm/opensuse/SDL2_image&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/SDL2_image&distro=openSUSE%20Leap%2015.1pkg:rpm/suse/SDL2_image&distro=SUSE%20Package%20Hub%2015pkg:rpm/suse/SDL2_image&distro=SUSE%20Package%20Hub%2015%20SP1
< 2.0.5-lp151.2.5.1+ 3 more
- (no CPE)range: < 2.0.5-lp151.2.5.1
- (no CPE)range: < 2.0.5-lp151.2.5.1
- (no CPE)range: < 2.0.5-bp151.4.3.1
- (no CPE)range: < 2.0.5-bp151.4.3.1
Patches
Vulnerability mechanics
References
8- bugzilla.libsdl.org/show_bug.cginvdExploitIssue TrackingVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.htmlnvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/07/msg00021.htmlnvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/07/msg00026.htmlnvdMailing ListThird Party Advisory
- usn.ubuntu.com/4238-1/nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ2VRD57UOBT72JUC2DIFHEFCH4N64SW/nvd
News mentions
0No linked articles in our index yet.