CVE-2020-14410

概要

参考情報

• bugzilla.libsdl.org/show_bug.cgi · Issue Tracking
• hg.libsdl.org/SDL/rev/3f9b4e92c1d9 · Patch
• lists.debian.org/debian-lts-announce/2021/01/msg00024.html · Mailing List
• lists.debian.org/debian-lts-announce/2023/02/msg00008.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FS32YCEJLQ2FYUWSWYI2ZMQWQEAWJNR · Mailing List
• security.gentoo.org/glsa/202107-55 · Third Party Advisory

simple directmedia layer のその他の脆弱性

• CVE-2022-4743高 7.5A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an atta…
• CVE-2022-34568高 7.5SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
• CVE-2021-33657高 8.8There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BM…
• CVE-2020-14409高 7.8SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SD…
• CVE-2019-14906緊急 9.8A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red Hat…