There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sdl2 | Aug 22, 2024 | Apr 1, 2022 |
| Debian | — | Upgrade libsdl2Upgrade libsdl1.2 | Feb 10, 2023 | Apr 1, 2022 |
| Gentoo Linux | — | Upgrade media-libs/libsdl.Upgrade media-libs/libsdl2. | May 4, 2023 | Apr 1, 2022 |
| Suse | — | Upgrade libsdl-develUpgrade sdlUpgrade libsdl2-devel-32bitUpgrade libsdl2-2_0-0-32bitUpgrade sdl-32bitUpgrade libsdl2-develUpgrade libsdl2-2_0-0Upgrade libsdl-devel-32bitUpgrade libsdl-1_2-0Upgrade libsdl-1_2-0-32bit | Oct 26, 2022 | Apr 1, 2022 |
| Ubuntu | — | Upgrade libsdl2-2.0-0Upgrade libsdl1.2debianUpgrade libsdl1.2debian (Ubuntu Pro) | Apr 29, 2022 | Apr 1, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub