CVE-2019-7635
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
Timeline
- CVE published
- Record last updated
Affected versions
- n/a n/a
Version range not reported
References 23
lists.debian.org
- debian-lts-announce/2019/03/msg00016.html
- debian-lts-announce/2019/03/msg00015.html
- debian-lts-announce/2019/07/msg00021.html
- debian-lts-announce/2019/07/msg00026.html
- debian-lts-announce/2019/10/msg00021.html
- debian-lts-announce/2019/10/msg00020.html
- debian-lts-announce/2021/01/msg00024.html
- debian-lts-announce/2021/10/msg00032.html
- debian-lts-announce/2023/02/msg00008.html