Search CVE reports


Toggle filters

31 – 40 of 51 results


CVE-2019-7635

Medium priority

Some fixes available 11 of 20

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.

4 affected packages

libsdl2, libsdl1.2, libsdl2-image, sdl-image1.2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl2 Not affected Not affected Not affected Not affected Fixed
libsdl1.2 Not in release Not in release Not affected Not affected Fixed
libsdl2-image Not affected Not affected Not affected Not affected Vulnerable
sdl-image1.2 Not affected Not affected Not affected Not affected Fixed
Show less packages

CVE-2019-7578

Low priority

Some fixes available 4 of 10

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.

2 affected packages

libsdl1.2, libsdl2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl1.2 Not in release Not in release Not affected Not affected Fixed
libsdl2 Not affected Not affected Not affected Not affected Vulnerable
Show less packages

CVE-2019-7577

Low priority

Some fixes available 4 of 10

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.

2 affected packages

libsdl1.2, libsdl2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl1.2 Not in release Not in release Not affected Not affected Fixed
libsdl2 Not affected Not affected Not affected Not affected Vulnerable
Show less packages

CVE-2019-7576

Low priority

Some fixes available 4 of 10

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop).

2 affected packages

libsdl1.2, libsdl2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl1.2 Not in release Not in release Not affected Not affected Fixed
libsdl2 Not affected Not affected Not affected Not affected Vulnerable
Show less packages

CVE-2019-7575

Low priority

Some fixes available 4 of 10

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.

2 affected packages

libsdl1.2, libsdl2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl1.2 Not in release Not in release Not affected Not affected Fixed
libsdl2 Not affected Not affected Not affected Not affected Vulnerable
Show less packages

CVE-2019-7574

Low priority

Some fixes available 4 of 10

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.

2 affected packages

libsdl1.2, libsdl2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl1.2 Not in release Not in release Not affected Not affected Fixed
libsdl2 Not affected Not affected Not affected Not affected Vulnerable
Show less packages

CVE-2019-7573

Low priority

Some fixes available 4 of 10

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop).

2 affected packages

libsdl1.2, libsdl2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl1.2 Not in release Not in release Not affected Not affected Fixed
libsdl2 Not affected Not affected Not affected Not affected Vulnerable
Show less packages

CVE-2019-7572

Low priority

Some fixes available 4 of 10

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.

2 affected packages

libsdl1.2, libsdl2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl1.2 Not in release Not in release Not affected Not affected Fixed
libsdl2 Not affected Not affected Not affected Not affected Vulnerable
Show less packages

CVE-2018-3977

Medium priority

Some fixes available 4 of 5

An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a...

2 affected packages

libsdl2-image, sdl-image1.2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl2-image — — Not affected Not affected Not affected
sdl-image1.2 — — Not affected Not affected Fixed
Show less packages

CVE-2017-14450

Medium priority

Some fixes available 4 of 6

A buffer overflow vulnerability exists in the GIF image parsing functionality of SDL2_image-2.0.2. A specially crafted GIF image can lead to a buffer overflow on a global section. An attacker can display an image to trigger this...

2 affected packages

libsdl2-image, sdl-image1.2

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libsdl2-image — — — — Not affected
sdl-image1.2 — — — — Not affected
Show less packages