Search CVE reports
1 – 10 of 51 results
A out-of-bounds write vulnerability exists in the dr_wav drwav__read_cue_to_metadata_obj functionality of dr_libs (version(s): 0.14.5). A specially crafted .wav file can lead to an out-of-bounds write. An attacker can provide a...
21 affected packages
aethersdr, dosbox-x, faudio, godot, guix...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| aethersdr | Not in release | Not in release | Not in release | — | — |
| dosbox-x | Needs evaluation | Needs evaluation | Not in release | — | — |
| faudio | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
| godot | Not in release | Needs evaluation | Needs evaluation | Needs evaluation | — |
| guix | Not in release | Needs evaluation | Needs evaluation | — | — |
| jazz2-native | Needs evaluation | Not in release | Not in release | — | — |
| libsdl2-mixer | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| libsdl3-mixer | Not in release | Not in release | Not in release | — | — |
| libsfml | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| miniaudio | Needs evaluation | Needs evaluation | Not in release | — | — |
| mlpack | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| octave-ltfat | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| opa-ff | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
| opa-fm | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
| qoa | Needs evaluation | Not in release | Not in release | — | — |
| qt6-multimedia | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| qtads | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| raylib | Not in release | Not in release | Not in release | — | — |
| roc-toolkit | Needs evaluation | Needs evaluation | Not in release | — | — |
| sdl12-compat | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
| wasmedge | Needs evaluation | Needs evaluation | Not in release | — | — |
A out-of-bounds read vulnerability exists in the dr_mp3 drmp3_init_internal functionality of dr_libs (version(s): 0.7.3). A specially crafted .mp3 file can lead to an out-of-bounds read. An attacker can provide a malicious file to...
15 affected packages
guix, libretro-desmume, libsdl2-mixer, libsdl3-mixer, libsfml...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| guix | Not in release | Needs evaluation | Needs evaluation | — | — |
| libretro-desmume | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| libsdl2-mixer | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| libsdl3-mixer | Not in release | Not in release | Not in release | — | — |
| libsfml | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| miniaudio | Needs evaluation | Needs evaluation | Not in release | — | — |
| mlpack | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| mrboom | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| ocp | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| pysdl2 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| qoa | Needs evaluation | Not in release | Not in release | — | — |
| qtads | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| raylib | Not in release | Not in release | Not in release | — | — |
| retroarch | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| sdl12-compat | Needs evaluation | Needs evaluation | Needs evaluation | — | — |
SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src/decoder_aiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. Attackers can supply a crafted AIFF-C file that...
2 affected packages
libsdl2-mixer, libsdl3-mixer
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libsdl2-mixer | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| libsdl3-mixer | Not in release | Not in release | Not in release | — | — |
SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw() of src/decoder_wav.c when decoding A-law or mu-law WAV files. Attackers can supply a crafted WAV file whose doubly-offset float...
2 affected packages
libsdl2-mixer, libsdl3-mixer
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libsdl2-mixer | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| libsdl3-mixer | Not in release | Not in release | Not in release | — | — |
SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM mode is set. Attackers can supply a crafted ILBM file...
2 affected packages
libsdl2-image, libsdl3-image
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libsdl2-image | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| libsdl3-image | Needs evaluation | Not in release | Not in release | — | — |
SDL_image is a library to load images of various formats as SDL surfaces. In do_layer_surface() in src/IMG_xcf.c, pixel index values from decoded XCF tile data are used directly as colormap indices without validating them against...
3 affected packages
libsdl2-image, libsdl3-image, sdl-image1.2
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libsdl2-image | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| libsdl3-image | Needs evaluation | Not in release | Not in release | — | — |
| sdl-image1.2 | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above....
1 affected package
libsdl2
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libsdl2 | Not affected | Not affected | Vulnerable | Vulnerable | Vulnerable |
Some fixes available 1 of 8
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
2 affected packages
libsdl1.2, libsdl2
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libsdl1.2 | Not in release | Not in release | Vulnerable | Vulnerable | Vulnerable |
| libsdl2 | Not affected | Not affected | Not affected | Not affected | Not affected |
SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). This vulnerability is triggered via a crafted TTF file.
1 affected package
libsdl2-ttf
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libsdl2-ttf | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
Some fixes available 4 of 13
There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of...
2 affected packages
libsdl1.2, libsdl2
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libsdl1.2 | Not in release | Not in release | Vulnerable | Vulnerable | Fixed |
| libsdl2 | Not affected | Not affected | Not affected | Vulnerable | Vulnerable |