CVE-2019-7576

Published: Feb 7, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop).

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[debian-lts-announce] 20190313 [SECURITY] [DLA 1714-1] libsdl2 security update

mailing-list

https://bugzilla.libsdl.org/show_bug.cgi?id=4490

[debian-lts-announce] 20190313 [SECURITY] [DLA 1713-1] libsdl1.2 security update

mailing-list

https://discourse.libsdl.org/t/vulnerabilities-found-in-libsdl-1-2-15/25720

openSUSE-SU-2019:1213

vendor-advisory

openSUSE-SU-2019:1223

vendor-advisory

openSUSE-SU-2019:1261

vendor-advisory

GLSA-201909-07

vendor-advisory

USN-4156-1

vendor-advisory

USN-4156-2

vendor-advisory

[debian-lts-announce] 20191017 [SECURITY] [DLA 1714-2] libsdl2 regression update

mailing-list

[debian-lts-announce] 20191017 [SECURITY] [DLA 1713-2] libsdl1.2 regression update

mailing-list

FEDORA-2020-24652fe41c

vendor-advisory

[debian-lts-announce] 20211031 [SECURITY] [DLA 2804-1] libsdl1.2 security update

mailing-list

[debian-lts-announce] 20230208 [SECURITY] [DLA 3314-1] libsdl2 security update

mailing-list

GLSA-202305-17

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2019-7576

Description

Affected Products

References