PT-2019-12705

CVE-2019-12219

·

Published

2019-05-20

·

Updated

2020-01-14

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Simple DirectMedia Layer (SDL) version 2.0.9 SDL2 image version 2.0.4
Description An issue was discovered in libSDL2.a when used with libSDL2 image.a. There is an invalid free error in the SDL SetError REAL function at SDL error.c.
Recommendations For Simple DirectMedia Layer (SDL) version 2.0.9, consider updating to a newer version to resolve the issue. For SDL2 image version 2.0.4, consider updating to a newer version to resolve the issue. As a temporary workaround, consider restricting the use of the SDL SetError REAL function until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
DLA-1861-1
DLA-1865-1
MGASA-2019-0363
MGASA-2019-0364
USN-4238-1
Found an issue in the description? Have something to add? Feel free to write us 👾