CVE-2019-12222

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html
• lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html
• bugzilla.libsdl.org/show_bug.cgi · Exploit
• lists.debian.org/debian-lts-announce/2019/07/msg00021.html
• lists.debian.org/debian-lts-announce/2019/07/msg00026.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ2VRD57UOBT72JUC2DIFHEFCH4N64SW
• usn.ubuntu.com/4238-1

simple directmedia layer のその他の脆弱性

• CVE-2022-4743高 7.5A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an atta…
• CVE-2022-34568高 7.5SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
• CVE-2021-33657高 8.8There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BM…
• CVE-2020-14410中 5.4SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via…
• CVE-2020-14409高 7.8SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SD…