CyberSec.Space Logo
Back to CVE Browser

CVE-2019-12219

HIGH
8.8
CVSS Severity Score
EPSS Score0.0210%
EPSS Percentile31.22th
PublishedMay 20, 2019
Last ModifiedNov 21, 2024

Vulnerability Description

An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an invalid free error in the SDL function SDL_SetError_REAL at SDL_error.c.

Affected Platforms (CPE)

📦
Libsdl

Sdl2 Image

= 2.0.4
📦
Libsdl

Simple Directmedia Layer

= 2.0.9

References & Advisories

🔗 https://bugzilla.libsdl.org/show_bug.cgi?id=4625
🔗 https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html
🔗 https://lists.debian.org/debian-lts-announce/2019/07/msg00026.html
🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO/
🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WJ2VRD57UOBT72JUC2DIFHEFCH4N64SW/
🔗 https://usn.ubuntu.com/4238-1/
🔗 https://bugzilla.libsdl.org/show_bug.cgi?id=4625
🔗 https://lists.debian.org/debian-lts-announce/2019/07/msg00021.html

Related Vulnerabilities

CVE-2017-121228.8

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially craf...

CVE-2017-144418.8

An exploitable code execution vulnerability exists in the ICO image rendering functionality of SDL2_image-2.0.2. A specially craft...

CVE-2017-144428.8

An exploitable code execution vulnerability exists in the BMP image rendering functionality of SDL2_image-2.0.2. A specially craft...

CVE-2017-144408.8

An exploitable code execution vulnerability exists in the ILBM image rendering functionality of SDL2_image-2.0.2. A specially craf...