PT-2022-6170 · Sdl2+5 · Sdl2+5

Tej Rathi · Published 2022-09-21 · Updated 2026-04-30 · CVE-2022-4743

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SDL2 versions 2.0.4 and above

Description A potential memory leak issue was discovered in the GLES CreateTexture() function in SDL render gles.c. This issue allows an attacker to cause a denial of service attack by exploiting the memory leak. The vulnerability can be exploited remotely.

Recommendations For SDL2 versions 2.0.4 and above, consider disabling the GLES CreateTexture() function as a temporary workaround to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALT-PU-2022-3219

ALT-PU-2024-12812

ALT-PU-2024-8940

AZL-43546

AZL-44748

BDU:2023-00292

CVE-2022-4743

DLA-3314-1

DLA-4382-1

JLSEC-2026-365

MGASA-2023-0020

OESA-2023-1029

OPENSUSE-SU-2023:0017-1

OPENSUSE-SU-2023_0069-1

OPENSUSE-SU-2024:13582-1

OPENSUSE-SU-2025:15206-1

SUSE-SU-2023:0069-1

SUSE-SU-2023_0069-1

Affected Products

Alt Linux

Astra Linux

Debian

Red Os

Sdl2

Suse

References · 60

• https://github.com/libsdl-org/SDL/commit/00b67f55727bc0944c3266e2b875440da132ce4b · Patch
• https://github.com/libsdl-org/SDL/pull/6269 · Patch
• https://advisories.mageia.org/MGASA-2023-0020.html · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2023:0017-1 · Vendor Advisory
• https://osv.dev/vulnerability/JLSEC-2026-365 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2023-0020 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2156290 · Patch
• https://osv.dev/vulnerability/AZL-43546 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-4743 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-4743 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15206-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-4743 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0727SE47 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-44748 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-4743 · Vendor Advisory