Debian Libsdl2-Image vulnerabilities

CVE-2019-12216 [MEDIUM] CVE-2019-12216: libsdl2-image - An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 whe... An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c. Scope: local bookworm: resolved (fixed in 2.0.5+dfsg1-1) bullseye: resolved (fixed in 2.0.5+dfsg1-1) forky: resolved (fixe

CVE-2019-12217 [MEDIUM] CVE-2019-12217: libsdl2-image - An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 whe... An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL pointer dereference in the SDL stdio_read function in file/SDL_rwops.c. Scope: local bookworm: resolved (fixed in 2.0.5+dfsg1-1) bullseye: resolved (fixed in 2.0.5+dfsg1-1) forky: resolved (fixed in 2

CVE-2019-12221 [MEDIUM] CVE-2019-12221: libsdl2-image - An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 whe... An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a SEGV in the SDL function SDL_free_REAL at stdlib/SDL_malloc.c. Scope: local bookworm: resolved (fixed in 2.0.5+dfsg1-1) bullseye: resolved (fixed in 2.0.5+dfsg1-1) forky: resolved (fixed in 2.0.5+dfsg1-1)

CVE-2019-12222 [MEDIUM] CVE-2019-12222: libsdl2-image - An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9. Th... An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9. There is an out-of-bounds read in the function SDL_InvalidateMap at video/SDL_pixels.c. Scope: local bookworm: resolved (fixed in 2.0.5+dfsg1-1) bullseye: resolved (fixed in 2.0.5+dfsg1-1) forky: resolved (fixed in 2.0.5+dfsg1-1) sid: resolved (fixed in 2.0.5+dfsg1-1) trixie: resol

CVE-2019-12220 [MEDIUM] CVE-2019-12220: libsdl2-image - An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 whe... An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an out-of-bounds read in the SDL function SDL_FreePalette_REAL at video/SDL_pixels.c. Scope: local bookworm: resolved (fixed in 2.0.5+dfsg1-1) bullseye: resolved (fixed in 2.0.5+dfsg1-1) forky: resolved (fix

CVE-2019-12218 [MEDIUM] CVE-2019-12218: libsdl2-image - An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 whe... An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL pointer dereference in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c. Scope: local bookworm: resolved (fixed in 2.0.5+dfsg1-1) bullseye: resolved (fixed in 2.0.5+dfsg1-1) forky: resolved (fixed

CVE-2018-3837 [MEDIUM] CVE-2018-3837: libsdl2-image - An exploitable information disclosure vulnerability exists in the PCX image rend... An exploitable information disclosure vulnerability exists in the PCX image rendering functionality of Simple DirectMedia Layer SDL2_image-2.0.2. A specially crafted PCX image can cause an out-of-bounds read on the heap, resulting in information disclosure . An attacker can display a specially crafted image to trigger this vulnerability. Scope: local bookworm: