CVE-2019-7638

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
Affected Products (NVD)
VendorProductVersion
libsdlsimple_directmedia_layer
𝑥
≤ 1.2.15
libsdlsimple_directmedia_layer
2.0.0 ≤
𝑥
≤ 2.0.9
debiandebian_linux
8.0
debiandebian_linux
9.0
opensuseleap
15.0
opensuseleap
42.3
canonicalubuntu_linux
16.04
canonicalubuntu_linux
18.04
canonicalubuntu_linux
19.04
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libsdl1.2
bookworm
1.2.15+dfsg2-8
fixed
bullseye
1.2.15+dfsg2-6
fixed
libsdl2
bookworm
2.26.5+dfsg-1
fixed
bullseye
2.0.14+dfsg2-3+deb11u1
fixed
sid
2.30.9+dfsg-1
fixed
trixie
2.30.8+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libsdl1.2
bionic
Fixed 1.2.15+dfsg2-0.1ubuntu0.1
released
cosmic
ignored
disco
ignored
eoan
not-affected
trusty
Fixed 1.2.15-8ubuntu1.1+esm1
released
xenial
Fixed 1.2.15+dfsg1-3ubuntu0.1
released
libsdl2
bionic
Fixed 2.0.8+dfsg1-1ubuntu1.18.04.4
released
cosmic
ignored
disco
Fixed 2.0.9+dfsg1-1ubuntu1.19.04.1
released
eoan
not-affected
trusty
Fixed 2.0.2+dfsg1-3ubuntu1.3
released
xenial
Fixed 2.0.4+dfsg1-2ubuntu2.16.04.2
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
SDL2-devel
suse enterprise desktop 15 SP6
2.28.5-150600.1.4
fixed
suse enterprise desktop 15 SP7
2.28.5-150600.1.4
fixed
suse enterprise sap 15 SP6
2.28.5-150600.1.4
fixed
suse enterprise sap 15 SP7
2.28.5-150600.1.4
fixed
suse enterprise server 15 SP6
2.28.5-150600.1.4
fixed
suse enterprise server 15 SP7
2.28.5-150600.1.4
fixed
libSDL-1_2-0
suse enterprise desktop 15
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP1
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP2
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP3
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP4
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP5
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP6
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP7
1.2.15-3.9.1
fixed
suse enterprise sap 12 SP3
1.2.15-15.11.1
fixed
suse enterprise sap 12 SP4
1.2.15-15.11.1
fixed
suse enterprise sap 12 SP5
1.2.15-15.11.1
fixed
suse enterprise sap 15
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP1
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP2
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP3
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP4
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP5
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP6
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP7
1.2.15-3.9.1
fixed
suse enterprise server 12 SP3
1.2.15-15.11.1
fixed
suse enterprise server 12 SP4
1.2.15-15.11.1
fixed
suse enterprise server 12 SP5
1.2.15-15.11.1
fixed
suse enterprise server 15
1.2.15-3.9.1
fixed
suse enterprise server 15 SP1
1.2.15-3.9.1
fixed
suse enterprise server 15 SP2
1.2.15-3.9.1
fixed
suse enterprise server 15 SP3
1.2.15-3.9.1
fixed
suse enterprise server 15 SP4
1.2.15-3.9.1
fixed
suse enterprise server 15 SP5
1.2.15-3.9.1
fixed
suse enterprise server 15 SP6
1.2.15-3.9.1
fixed
suse enterprise server 15 SP7
1.2.15-3.9.1
fixed
libSDL-1_2-0-32bit
suse enterprise sap 12 SP3
1.2.15-15.11.1
fixed
suse enterprise sap 12 SP4
1.2.15-15.11.1
fixed
suse enterprise sap 12 SP5
1.2.15-15.11.1
fixed
suse enterprise server 12 SP3
1.2.15-15.11.1
fixed
suse enterprise server 12 SP4
1.2.15-15.11.1
fixed
suse enterprise server 12 SP5
1.2.15-15.11.1
fixed
libSDL-devel
suse enterprise desktop 15
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP1
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP2
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP3
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP4
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP5
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP6
1.2.15-3.9.1
fixed
suse enterprise desktop 15 SP7
1.2.15-3.9.1
fixed
suse enterprise sap 15
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP1
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP2
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP3
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP4
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP5
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP6
1.2.15-3.9.1
fixed
suse enterprise sap 15 SP7
1.2.15-3.9.1
fixed
suse enterprise server 15
1.2.15-3.9.1
fixed
suse enterprise server 15 SP1
1.2.15-3.9.1
fixed
suse enterprise server 15 SP2
1.2.15-3.9.1
fixed
suse enterprise server 15 SP3
1.2.15-3.9.1
fixed
suse enterprise server 15 SP4
1.2.15-3.9.1
fixed
suse enterprise server 15 SP5
1.2.15-3.9.1
fixed
suse enterprise server 15 SP6
1.2.15-3.9.1
fixed
suse enterprise server 15 SP7
1.2.15-3.9.1
fixed
libSDL2-2_0-0
suse enterprise desktop 15
2.0.8-3.9.1
fixed
suse enterprise desktop 15 SP1
2.0.8-3.9.1
fixed
suse enterprise desktop 15 SP2
2.0.8-9.63
fixed
suse enterprise desktop 15 SP3
2.0.8-9.63
fixed
suse enterprise desktop 15 SP4
2.0.8-150200.11.6.1
fixed
suse enterprise desktop 15 SP5
2.0.8-150200.11.9.1
fixed
suse enterprise desktop 15 SP6
2.28.5-150600.1.4
fixed
suse enterprise desktop 15 SP7
2.28.5-150600.1.4
fixed
suse enterprise sap 15
2.0.8-3.9.1
fixed
suse enterprise sap 15 SP1
2.0.8-3.9.1
fixed
suse enterprise sap 15 SP2
2.0.8-9.63
fixed
suse enterprise sap 15 SP3
2.0.8-9.63
fixed
suse enterprise sap 15 SP4
2.0.8-150200.11.6.1
fixed
suse enterprise sap 15 SP5
2.0.8-150200.11.9.1
fixed
suse enterprise sap 15 SP6
2.28.5-150600.1.4
fixed
suse enterprise sap 15 SP7
2.28.5-150600.1.4
fixed
suse enterprise server 15
2.0.8-3.9.1
fixed
suse enterprise server 15 SP1
2.0.8-3.9.1
fixed
suse enterprise server 15 SP2
2.0.8-9.63
fixed
suse enterprise server 15 SP3
2.0.8-9.63
fixed
suse enterprise server 15 SP4
2.0.8-150200.11.6.1
fixed
suse enterprise server 15 SP5
2.0.8-150200.11.9.1
fixed
suse enterprise server 15 SP6
2.28.5-150600.1.4
fixed
suse enterprise server 15 SP7
2.28.5-150600.1.4
fixed
libSDL2-devel
suse enterprise desktop 15
2.0.8-3.9.1
fixed
suse enterprise desktop 15 SP1
2.0.8-3.9.1
fixed
suse enterprise desktop 15 SP2
2.0.8-9.63
fixed
suse enterprise desktop 15 SP3
2.0.8-9.63
fixed
suse enterprise desktop 15 SP4
2.0.8-150200.11.6.1
fixed
suse enterprise desktop 15 SP5
2.0.8-150200.11.9.1
fixed
suse enterprise sap 15
2.0.8-3.9.1
fixed
suse enterprise sap 15 SP1
2.0.8-3.9.1
fixed
suse enterprise sap 15 SP2
2.0.8-9.63
fixed
suse enterprise sap 15 SP3
2.0.8-9.63
fixed
suse enterprise sap 15 SP4
2.0.8-150200.11.6.1
fixed
suse enterprise sap 15 SP5
2.0.8-150200.11.9.1
fixed
suse enterprise server 15
2.0.8-3.9.1
fixed
suse enterprise server 15 SP1
2.0.8-3.9.1
fixed
suse enterprise server 15 SP2
2.0.8-9.63
fixed
suse enterprise server 15 SP3
2.0.8-9.63
fixed
suse enterprise server 15 SP4
2.0.8-150200.11.6.1
fixed
suse enterprise server 15 SP5
2.0.8-150200.11.9.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
SDL
RHEL 7
0:1.2.15-17.el7
fixed
RHEL 8
0:1.2.15-38.el8
fixed
SDL-devel
RHEL 7
0:1.2.15-17.el7
fixed
RHEL 8
0:1.2.15-38.el8
fixed
SDL-static
RHEL 7
0:1.2.15-17.el7
fixed
References