HighCVSS 7.5
EPSS 1.1%
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
Product
debian/libsdl1.2 vulnerabilities
20 published CVES affecting debian/libsdl1.2, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 20
- Critical
- 0
- High
- 15
- Medium
- 2
- Low
- 0
- Unscored
- 3
- CISA KEV
- 0
Latest debian/libsdl1.2 CVEs
Newest publication first
-
-
HighCVSS 8.8 EPSS 2.1%
There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.
-
DLA-2804-1 libsdl1.2 - security update
PublishedUnknown -
MediumCVSS 5.4 EPSS 1.7%
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
-
DLA-1713-2 libsdl1.2 - regression update
PublishedUnknown -
MediumCVSS 6.5 EPSS 1.8%
SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.
-
HighCVSS 8.1 EPSS 3.7%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
-
DLA-1713-1 libsdl1.2 - security update
PublishedUnknown -
HighCVSS 8.8 EPSS 3.1%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.
-
HighCVSS 8.8 EPSS 2.9%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.
-
HighCVSS 8.1 EPSS 2.9%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.
-
HighCVSS 8.1 EPSS 3.5%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
-
HighCVSS 8.1 EPSS 2.9%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.
-
HighCVSS 8.8 EPSS 3.2%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.
-
HighCVSS 8.8 EPSS 3.0%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop).
-
HighCVSS 8.8 EPSS 2.9%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.
-
HighCVSS 8.8 EPSS 3.0%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.
-
HighCVSS 8.8 EPSS 3.2%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop).
-
HighCVSS 8.8 EPSS 2.8%
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.
-
HighCVSS 8.8 EPSS 3.1%
An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted file can cause an integer overflow resulting in too little memory being allocated which can lead to a buffer overflow and potential code execution. An attacker c...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.