CVE-2019-7635
Description
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.
Risk Information
Base Score
8.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
EPSS Score
Exploitation Probability
7.985
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Simple DirectMedia Layer (USN-4156-1) libsdl1.2debian_1.2.15+dfsg1-3ubuntu0.1_i386.deb | Linux |
| Simple DirectMedia Layer (USN-4156-1) libsdl1.2debian_1.2.15+dfsg1-3ubuntu0.1_amd64.deb | Linux |
| Simple DirectMedia Layer (USN-4156-1) libsdl1.2debian_1.2.15+dfsg2-0.1ubuntu0.1_i386.deb | Linux |
| Simple DirectMedia Layer (USN-4156-1) libsdl1.2debian_1.2.15+dfsg2-0.1ubuntu0.1_amd64.deb | Linux |
| Image loading library for Simple DirectMedia Layer 1.2 (USN-4238-1) libsdl-image1.2_1.2.12-8ubuntu0.1_i386.deb | Linux |
| Image loading library for Simple DirectMedia Layer 1.2 (USN-4238-1) libsdl-image1.2_1.2.12-8ubuntu0.1_amd64.deb | Linux |
| Image loading library for Simple DirectMedia Layer 1.2 (USN-4238-1) libsdl-image1.2_1.2.12-5+deb9u1ubuntu0.16.04.1_i386.deb | Linux |
| Image loading library for Simple DirectMedia Layer 1.2 (USN-4238-1) libsdl-image1.2_1.2.12-5+deb9u1ubuntu0.16.04.1_amd64.deb | Linux |
| (RHSA-2020:3868) SDL security update SDL-1.2.15-17.el7.i686.rpm | Linux |
| (RHSA-2020:3868) SDL security update SDL-1.2.15-17.el7.x86_64.rpm | Linux |
| (RHSA-2020:3868) SDL security update SDL-devel-1.2.15-17.el7.i686.rpm | Linux |
| (RHSA-2020:3868) SDL security update SDL-devel-1.2.15-17.el7.x86_64.rpm | Linux |
| (RHSA-2020:3868) SDL security update SDL-static-1.2.15-17.el7.i686.rpm | Linux |
| (RHSA-2020:3868) SDL security update SDL-static-1.2.15-17.el7.x86_64.rpm | Linux |
| (RHSA-2020:4627) SDL security update SDL-1.2.15-38.el8.i686.rpm | Linux |
| (RHSA-2020:4627) SDL security update SDL-1.2.15-38.el8.x86_64.rpm | Linux |
| (RHSA-2020:4627) SDL security update SDL-debugsource-1.2.15-38.el8.i686.rpm | Linux |
| (RHSA-2020:4627) SDL security update SDL-debugsource-1.2.15-38.el8.x86_64.rpm | Linux |
| (RHSA-2020:4627) SDL security update SDL-devel-1.2.15-38.el8.i686.rpm | Linux |
| (RHSA-2020:4627) SDL security update SDL-devel-1.2.15-38.el8.x86_64.rpm | Linux |
| (CESA-2020:3868) SDL security update SDL-1.2.15-17.el7.x86_64.rpm | Linux |
| (CESA-2020:3868) SDL security update SDL-devel-1.2.15-17.el7.x86_64.rpm | Linux |
| (CESA-2020:3868) SDL security update SDL-static-1.2.15-17.el7.x86_64.rpm | Linux |
| (RHSA-2020:3868)Moderate: security update SDL-debuginfo-1.2.15-17.el7.i686.rpm | Linux |
| (RHSA-2020:3868)Moderate: security update SDL-debuginfo-1.2.15-17.el7.x86_64.rpm | Linux |
| (RHSA-2020:4627)Moderate: security update SDL-debuginfo-1.2.15-38.el8.i686.rpm | Linux |
| (RHSA-2020:4627)Moderate: security update SDL-debuginfo-1.2.15-38.el8.x86_64.rpm | Linux |
| SDL update (ELSA-2020-3868) SDL-1.2.15-17.el7.i686.rpm | Linux |
| SDL update (ELSA-2020-3868) SDL-1.2.15-17.el7.x86_64.rpm | Linux |
| SDL-devel update (ELSA-2020-3868) SDL-devel-1.2.15-17.el7.i686.rpm | Linux |
| SDL-devel update (ELSA-2020-3868) SDL-devel-1.2.15-17.el7.x86_64.rpm | Linux |
| SDL update (ELSA-2020-4627) SDL-1.2.15-38.el8.i686.rpm | Linux |
| SDL update (ELSA-2020-4627) SDL-1.2.15-38.el8.x86_64.rpm | Linux |
| SDL-devel update (ELSA-2020-4627) SDL-devel-1.2.15-38.el8.i686.rpm | Linux |
| SDL-devel update (ELSA-2020-4627) SDL-devel-1.2.15-38.el8.x86_64.rpm | Linux |
| SDL Security Update (ALAS-2020-1500) SDL-1.2.15-17.amzn2.i686.rpm | Linux |
| SDL Security Update (ALAS-2020-1500) SDL-1.2.15-17.amzn2.x86_64.rpm | Linux |
| SDL Security Update (ALAS-2020-1500) SDL-devel-1.2.15-17.amzn2.x86_64.rpm | Linux |
| SDL Security Update (ALAS-2020-1500) SDL-static-1.2.15-17.amzn2.x86_64.rpm | Linux |
| Out-of-bounds Read Vulnerability (CVE-2019-7635) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234