This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-7635 →

DEBIAN-CVE-2019-7635

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 libsdl1.2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.15+dfsg2-5"}]}]

Debian:12 libsdl2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.10+dfsg1-1"}]}]

Debian:13 libsdl2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.10+dfsg1-1"}]}]

Debian:14 libsdl2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.10+dfsg1-1"}]}]

Debian:12 libsdl2-image

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.5+dfsg1-1"}]}]

Debian:13 libsdl2-image

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.5+dfsg1-1"}]}]

Debian:14 libsdl2-image

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.5+dfsg1-1"}]}]

Debian:12 sdl-image1.2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-11"}]}]

Debian:13 sdl-image1.2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-11"}]}]

Debian:14 sdl-image1.2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.12-11"}]}]