| Package | Affected versions | Patched versions |
|---|---|---|
| simple directmedia layer | ≥ 2.0.12, ≤ 2.0.20 |
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free