PT-2019-12705 · Simple Directmedia Layer+1 · Sdl2 Image+2

Hugo Lefeuvre

·

Publicado

2019-05-20

·

Atualizado

2020-01-14

·

CVE-2019-12219

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Simple DirectMedia Layer (SDL) version 2.0.9 SDL2 image version 2.0.4
Description An issue was discovered in libSDL2.a when used with libSDL2 image.a. There is an invalid free error in the SDL SetError REAL function at SDL error.c.
Recommendations For Simple DirectMedia Layer (SDL) version 2.0.9, consider updating to a newer version to resolve the issue. For SDL2 image version 2.0.4, consider updating to a newer version to resolve the issue. As a temporary workaround, consider restricting the use of the SDL SetError REAL function until a patch is available.

Exploit

Correção

Double Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2019-12219
DLA-1861-1
DLA-1865-1
MGASA-2019-0363
MGASA-2019-0364
USN-4238-1

Produtos afetados

Sdl
Sdl2 Image
Ubuntu