cbcvebase.
CVE-2019-12221
published 2019-05-20

CVE-2019-12221: An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a SEGV…

medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a SEGV in the SDL function SDL_free_REAL at stdlib/SDL_malloc.c.

Affected

12 ranges
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debianlibsdl2-image< libsdl2-image 2.0.5+dfsg1-1 (bookworm)libsdl2-image 2.0.5+dfsg1-1 (bookworm)
debiansdl-image1.2< libsdl2-image 2.0.5+dfsg1-1 (bookworm)libsdl2-image 2.0.5+dfsg1-1 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
libsdlsdl2_image
libsdlsimple_directmedia_layer
opensusebackports_sle
opensuseleap
opensuseleap

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.5MEDIUM