CVE-2020-14409

Published: Jan 19, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://bugzilla.libsdl.org/show_bug.cgi?id=5200

https://hg.libsdl.org/SDL/rev/3f9b4e92c1d9

[debian-lts-announce] 20210130 [SECURITY] [DLA 2536-1] libsdl2 security update

mailing-list

FEDORA-2021-9d65b22041

vendor-advisory

GLSA-202107-55

vendor-advisory

https://www.starwindsoftware.com/security/sw-20210325-0001/

[debian-lts-announce] 20230208 [SECURITY] [DLA 3314-1] libsdl2 security update

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-14409

Description

Affected Products

References