CVE-2019-13626
17.07.2019, 16:15
SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| libsdl | libsdl | 2.0.0 ≤ 𝑥 ≤ 2.0.9 |
| debian | debian_linux | 10.0 |
| opensuse | leap | 15.0 |
| opensuse | leap | 15.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libsdl1.2 |
| ||||||||||||||||||||||||||||
| libsdl2 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| SDL2-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| libSDL2-2_0-0 |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| libSDL2-devel |
|
Common Weakness Enumeration
References