This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-14410 →

DEBIAN-CVE-2020-14410

SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted...

Original description

The description as published by the source.

SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 libsdl2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14+dfsg2-2"}]}]

Debian:13 libsdl2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14+dfsg2-2"}]}]

Debian:14 libsdl2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.14+dfsg2-2"}]}]

References

advisory security-tracker.debian.org