Search CVE reports


Toggle filters

11 – 20 of 51 results


CVE-2020-14410

Medium priority

Some fixes available 2 of 3

SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.

2 affected packages

libsdl1.2, libsdl2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl1.2 Not in release Not in release Not affected Not affected Not affected
libsdl2 Not affected Not affected Not affected Fixed Fixed
Show less packages

CVE-2020-14409

Medium priority

Some fixes available 2 of 3

SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.

2 affected packages

libsdl1.2, libsdl2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl1.2 Not in release Not in release Not affected Not affected Not affected
libsdl2 Not affected Not affected Not affected Fixed Fixed
Show less packages

CVE-2019-13616

Low priority

Some fixes available 6 of 17

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.

4 affected packages

libsdl2, libsdl1.2, libsdl2-image, sdl-image1.2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl2 Not affected Not affected Not affected Not affected Vulnerable
libsdl1.2 Not in release Not in release Not affected Not affected Fixed
libsdl2-image Not affected Not affected Not affected Not affected Vulnerable
sdl-image1.2 Not affected Not affected Not affected Not affected Fixed
Show less packages

CVE-2019-5060

Medium priority

Some fixes available 15 of 19

An exploitable code execution vulnerability exists in the XPM image rendering function of SDL2_image 2.0.4. A specially crafted XPM image can cause an integer overflow in the colorhash function, allocating too small of a buffer....

1 affected package

libsdl2-image

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl2-image Fixed Fixed Fixed Fixed Vulnerable
Show less packages

CVE-2019-5059

Medium priority

Some fixes available 15 of 19

An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2_image 2.0.4. A specially crafted XPM image can cause an integer overflow, allocating too small of a buffer. This buffer can then...

1 affected package

libsdl2-image

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl2-image Fixed Fixed Fixed Fixed Vulnerable
Show less packages

CVE-2019-5058

Medium priority

Some fixes available 15 of 19

An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image 2.0.4. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a...

1 affected package

libsdl2-image

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl2-image Fixed Fixed Fixed Fixed Vulnerable
Show less packages

CVE-2019-5057

Medium priority

Some fixes available 15 of 19

An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2_image 2.0.4. A specially crafted PCX image can cause a heap overflow, resulting in code execution. An attacker can display a...

1 affected package

libsdl2-image

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl2-image Fixed Fixed Fixed Fixed Vulnerable
Show less packages

CVE-2019-13626

Medium priority
Vulnerable

SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.

2 affected packages

libsdl1.2, libsdl2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl1.2 Not in release Not in release Not affected Not affected Not affected
libsdl2 Not affected Not affected Not affected Not affected Vulnerable
Show less packages

CVE-2019-5052

Medium priority

Some fixes available 4 of 10

An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4. A specially crafted file can cause an integer overflow, resulting in too little memory being allocated, which can lead to a buffer...

2 affected packages

libsdl2-image, sdl-image1.2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl2-image Not affected Not affected Not affected Not affected Vulnerable
sdl-image1.2 Not affected Not affected Not affected Not affected Fixed
Show less packages

CVE-2019-5051

Medium priority

Some fixes available 4 of 10

An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4. A missing error handler can lead to a buffer overflow and potential code execution. An attacker can provide a...

2 affected packages

libsdl2-image, sdl-image1.2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl2-image Not affected Not affected Not affected Not affected Vulnerable
sdl-image1.2 Not affected Not affected Not affected Not affected Fixed
Show less packages