Summary
It was discovered that Simple DirectMedia Layer library incorrectly handled
memory when parsing certain specially crafted .BMP files. An attacker could possibly use
these issues to crash the application or execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libsdl2 | 2.0.8+dfsg1-1ubuntu1.18.04.4+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | libsdl2 | 2.0.10+dfsg1-3ubuntu0.1~esm1 |
Vulnerabilities 2
-
Unscored —
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL…
-
Unscored —
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in v…