CVE-2019-13616

HIGH 8.1CVE-2019-13616 · Published 16/07/2019 · updated 17/06/2026

In short

CVE-2019-13616 is a HIGH (CVSS 8.1) vulnerability affecting simple directmedia layer (libsdl), backports sle (opensuse).
Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
simple directmedia layer libsdl	`≥ 2.0.0, ≤ 2.0.9≤ 1.2.15`	No fix yet
backports sle opensuse	`= 15.0`	No fix yet

Description

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.

References

lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-09/msg00030.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-09/msg00093.html · Mailing List
lists.opensuse.org/opensuse-security-announce/2019-09/msg00094.html · Mailing List
access.redhat.com/errata/RHSA-2019:3950 · Third Party Advisory
access.redhat.com/errata/RHSA-2019:3951 · Third Party Advisory
access.redhat.com/errata/RHSA-2020:0293 · Third Party Advisory
bugzilla.libsdl.org/show_bug.cgi · Exploit

More vulnerabilities in simple directmedia layer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free