CVE-2021-33657
01.04.2022, 23:15
There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| libsdl | simple_directmedia_layer | 2.0.0 ≤ 𝑥 ≤ 2.0.18 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libsdl1.2 |
| ||||||||||||||||||||
| libsdl2 |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| SDL2-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libSDL-1_2-0 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libSDL-1_2-0-32bit |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libSDL-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libSDL2-2_0-0 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libSDL2-devel |
|
Common Weakness Enumeration
References