CVE-2019-7575

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
Affected Products (NVD)
VendorProductVersion
libsdlsimple_directmedia_layer
𝑥
≤ 1.2.15
libsdlsimple_directmedia_layer
2.0.0 ≤
𝑥
≤ 2.0.9
debiandebian_linux
8.0
debiandebian_linux
9.0
opensuseleap
15.0
opensuseleap
42.3
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
18.04
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libsdl1.2
bookworm
1.2.15+dfsg2-8
fixed
bullseye
1.2.15+dfsg2-6
fixed
libsdl2
bookworm
2.26.5+dfsg-1
fixed
bullseye
2.0.14+dfsg2-3+deb11u1
fixed
sid
2.30.9+dfsg-1
fixed
trixie
2.30.8+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libsdl1.2
bionic
Fixed 1.2.15+dfsg2-0.1ubuntu0.1
released
cosmic
ignored
disco
ignored
eoan
not-affected
focal
not-affected
groovy
not-affected
hirsute
not-affected
impish
not-affected
jammy
not-affected
kinetic
not-affected
lunar
not-affected
mantic
dne
noble
dne
trusty
Fixed 1.2.15-8ubuntu1.1+esm1
released
xenial
Fixed 1.2.15+dfsg1-3ubuntu0.1
released
libsdl2
bionic
needed
cosmic
ignored
disco
ignored
eoan
not-affected
focal
not-affected
groovy
not-affected
hirsute
not-affected
impish
not-affected
jammy
not-affected
kinetic
not-affected
lunar
not-affected
mantic
not-affected
noble
not-affected
trusty
Fixed 2.0.2+dfsg1-3ubuntu1.3+esm1
released
xenial
needed
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
SDL2-devel
suse enterprise desktop 15 SP6
2.28.5-150600.1.4
fixed
suse enterprise desktop 15 SP7
2.28.5-150600.1.4
fixed
suse enterprise sap 15 SP6
2.28.5-150600.1.4
fixed
suse enterprise sap 15 SP7
2.28.5-150600.1.4
fixed
suse enterprise server 15 SP6
2.28.5-150600.1.4
fixed
suse enterprise server 15 SP7
2.28.5-150600.1.4
fixed
libSDL-1_2-0
suse enterprise desktop 15
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP1
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP2
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP3
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP4
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP5
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP6
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP7
1.2.15-3.9.1
fixed
suse enterprise sap 12 SP3
1.2.15-15.11.1
fixed
suse enterprise sap 12 SP4
1.2.15-15.11.1
fixed
suse enterprise sap 12 SP5
1.2.15-15.11.1
fixed
suse enterprise sap 15
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP1
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP2
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP3
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP4
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP5
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP6
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP7
1.2.15-3.9.1
fixed
suse enterprise server 12 SP3
1.2.15-15.11.1
fixed
suse enterprise server 12 SP4
1.2.15-15.11.1
fixed
suse enterprise server 12 SP5
1.2.15-15.11.1
fixed
suse enterprise server 15
1.2.15-3.9.1
fixed
suse enterprise server 15 SP1
1.2.15-3.9.1
fixed
suse enterprise server 15 SP2
1.2.15-3.9.1
fixed
suse enterprise server 15 SP3
1.2.15-3.9.1
fixed
suse enterprise server 15 SP4
1.2.15-3.9.1
fixed
suse enterprise server 15 SP5
1.2.15-3.9.1
fixed
suse enterprise server 15 SP6
1.2.15-3.9.1
fixed
suse enterprise server 15 SP7
1.2.15-3.9.1
fixed
libSDL-1_2-0-32bit
suse enterprise sap 12 SP3
1.2.15-15.11.1
fixed
suse enterprise sap 12 SP4
1.2.15-15.11.1
fixed
suse enterprise sap 12 SP5
1.2.15-15.11.1
fixed
suse enterprise server 12 SP3
1.2.15-15.11.1
fixed
suse enterprise server 12 SP4
1.2.15-15.11.1
fixed
suse enterprise server 12 SP5
1.2.15-15.11.1
fixed
libSDL-devel
suse enterprise desktop 15
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP1
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP2
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP3
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP4
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP5
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP6
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP7
1.2.15-3.9.1
fixed
suse enterprise sap 15
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP1
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP2
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP3
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP4
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP5
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP6
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP7
1.2.15-3.9.1
fixed
suse enterprise server 15
1.2.15-3.9.1
fixed
suse enterprise server 15 SP1
1.2.15-3.9.1
fixed
suse enterprise server 15 SP2
1.2.15-3.9.1
fixed
suse enterprise server 15 SP3
1.2.15-3.9.1
fixed
suse enterprise server 15 SP4
1.2.15-3.9.1
fixed
suse enterprise server 15 SP5
1.2.15-3.9.1
fixed
suse enterprise server 15 SP6
1.2.15-3.9.1
fixed
suse enterprise server 15 SP7
1.2.15-3.9.1
fixed
libSDL2-2_0-0
suse enterprise desktop 15
2.0.8-3.9.1
fixed
suse enterprise desktop 15 SP1
2.0.8-3.9.1
fixed
suse enterprise desktop 15 SP2
2.0.8-9.63
fixed
suse enterprise desktop 15 SP3
2.0.8-9.63
fixed
suse enterprise desktop 15 SP4
2.0.8-150200.11.6.1
fixed
suse enterprise desktop 15 SP5
2.0.8-150200.11.9.1
fixed
suse enterprise desktop 15 SP6
2.28.5-150600.1.4
fixed
suse enterprise desktop 15 SP7
2.28.5-150600.1.4
fixed
suse enterprise sap 15
2.0.8-3.9.1
fixed
suse enterprise sap 15 SP1
2.0.8-3.9.1
fixed
suse enterprise sap 15 SP2
2.0.8-9.63
fixed
suse enterprise sap 15 SP3
2.0.8-9.63
fixed
suse enterprise sap 15 SP4
2.0.8-150200.11.6.1
fixed
suse enterprise sap 15 SP5
2.0.8-150200.11.9.1
fixed
suse enterprise sap 15 SP6
2.28.5-150600.1.4
fixed
suse enterprise sap 15 SP7
2.28.5-150600.1.4
fixed
suse enterprise server 15
2.0.8-3.9.1
fixed
suse enterprise server 15 SP1
2.0.8-3.9.1
fixed
suse enterprise server 15 SP2
2.0.8-9.63
fixed
suse enterprise server 15 SP3
2.0.8-9.63
fixed
suse enterprise server 15 SP4
2.0.8-150200.11.6.1
fixed
suse enterprise server 15 SP5
2.0.8-150200.11.9.1
fixed
suse enterprise server 15 SP6
2.28.5-150600.1.4
fixed
suse enterprise server 15 SP7
2.28.5-150600.1.4
fixed
libSDL2-devel
suse enterprise desktop 15
2.0.8-3.9.1
fixed
suse enterprise desktop 15 SP1
2.0.8-3.9.1
fixed
suse enterprise desktop 15 SP2
2.0.8-9.63
fixed
suse enterprise desktop 15 SP3
2.0.8-9.63
fixed
suse enterprise desktop 15 SP4
2.0.8-150200.11.6.1
fixed
suse enterprise desktop 15 SP5
2.0.8-150200.11.9.1
fixed
suse enterprise sap 15
2.0.8-3.9.1
fixed
suse enterprise sap 15 SP1
2.0.8-3.9.1
fixed
suse enterprise sap 15 SP2
2.0.8-9.63
fixed
suse enterprise sap 15 SP3
2.0.8-9.63
fixed
suse enterprise sap 15 SP4
2.0.8-150200.11.6.1
fixed
suse enterprise sap 15 SP5
2.0.8-150200.11.9.1
fixed
suse enterprise server 15
2.0.8-3.9.1
fixed
suse enterprise server 15 SP1
2.0.8-3.9.1
fixed
suse enterprise server 15 SP2
2.0.8-9.63
fixed
suse enterprise server 15 SP3
2.0.8-9.63
fixed
suse enterprise server 15 SP4
2.0.8-150200.11.6.1
fixed
suse enterprise server 15 SP5
2.0.8-150200.11.9.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
SDL
RHEL 7
0:1.2.15-17.el7
fixed
RHEL 8
0:1.2.15-38.el8
fixed
SDL-devel
RHEL 7
0:1.2.15-17.el7
fixed
RHEL 8
0:1.2.15-38.el8
fixed
SDL-static
RHEL 7
0:1.2.15-17.el7
fixed
References