rpm package
opensuse/SDL2&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/SDL2&distro=openSUSE%20Tumbleweed
Vulnerabilities (17)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-4743 | — | < 2.28.5-2.1 | 2.28.5-2.1 | Jan 12, 2023 | A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected. | ||
| CVE-2021-33657 | — | < 2.28.5-2.1 | 2.28.5-2.1 | Apr 1, 2022 | There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution. | ||
| CVE-2020-14410 | — | < 2.28.5-2.1 | 2.28.5-2.1 | Jan 19, 2021 | SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file. | ||
| CVE-2020-14409 | — | < 2.28.5-2.1 | 2.28.5-2.1 | Jan 19, 2021 | SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file. | ||
| CVE-2019-13626 | — | < 2.0.16-2.3 | 2.0.16-2.3 | Jul 17, 2019 | SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c. | ||
| CVE-2019-13616 | — | < 2.0.16-2.3 | 2.0.16-2.3 | Jul 16, 2019 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c. | ||
| CVE-2019-7637 | — | < 2.28.5-2.1 | 2.28.5-2.1 | Feb 8, 2019 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c. | ||
| CVE-2019-7638 | — | < 2.0.16-2.3 | 2.0.16-2.3 | Feb 8, 2019 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c. | ||
| CVE-2019-7636 | — | < 2.28.5-2.1 | 2.28.5-2.1 | Feb 8, 2019 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c. | ||
| CVE-2019-7635 | — | < 2.0.16-2.3 | 2.0.16-2.3 | Feb 8, 2019 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c. | ||
| CVE-2019-7578 | — | < 2.28.5-2.1 | 2.28.5-2.1 | Feb 7, 2019 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c. | ||
| CVE-2019-7577 | — | < 2.28.5-2.1 | 2.28.5-2.1 | Feb 7, 2019 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c. | ||
| CVE-2019-7575 | — | < 2.28.5-2.1 | 2.28.5-2.1 | Feb 7, 2019 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c. | ||
| CVE-2019-7574 | — | < 2.28.5-2.1 | 2.28.5-2.1 | Feb 7, 2019 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c. | ||
| CVE-2019-7573 | — | < 2.28.5-2.1 | 2.28.5-2.1 | Feb 7, 2019 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop). | ||
| CVE-2019-7572 | — | < 2.28.5-2.1 | 2.28.5-2.1 | Feb 7, 2019 | SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c. | ||
| CVE-2017-2888 | Hig | 8.8 | < 2.0.16-2.3 | 2.0.16-2.3 | Oct 11, 2017 | An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker c |
- CVE-2022-4743Jan 12, 2023affected < 2.28.5-2.1fixed 2.28.5-2.1
A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.
- CVE-2021-33657Apr 1, 2022affected < 2.28.5-2.1fixed 2.28.5-2.1
There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.
- CVE-2020-14410Jan 19, 2021affected < 2.28.5-2.1fixed 2.28.5-2.1
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
- CVE-2020-14409Jan 19, 2021affected < 2.28.5-2.1fixed 2.28.5-2.1
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
- CVE-2019-13626Jul 17, 2019affected < 2.0.16-2.3fixed 2.0.16-2.3
SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.
- CVE-2019-13616Jul 16, 2019affected < 2.0.16-2.3fixed 2.0.16-2.3
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
- CVE-2019-7637Feb 8, 2019affected < 2.28.5-2.1fixed 2.28.5-2.1
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.
- CVE-2019-7638Feb 8, 2019affected < 2.0.16-2.3fixed 2.0.16-2.3
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.
- CVE-2019-7636Feb 8, 2019affected < 2.28.5-2.1fixed 2.28.5-2.1
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.
- CVE-2019-7635Feb 8, 2019affected < 2.0.16-2.3fixed 2.0.16-2.3
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
- CVE-2019-7578Feb 7, 2019affected < 2.28.5-2.1fixed 2.28.5-2.1
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.
- CVE-2019-7577Feb 7, 2019affected < 2.28.5-2.1fixed 2.28.5-2.1
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.
- CVE-2019-7575Feb 7, 2019affected < 2.28.5-2.1fixed 2.28.5-2.1
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.
- CVE-2019-7574Feb 7, 2019affected < 2.28.5-2.1fixed 2.28.5-2.1
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.
- CVE-2019-7573Feb 7, 2019affected < 2.28.5-2.1fixed 2.28.5-2.1
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop).
- CVE-2019-7572Feb 7, 2019affected < 2.28.5-2.1fixed 2.28.5-2.1
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.
- affected < 2.0.16-2.3fixed 2.0.16-2.3
An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker c