PT-2022-6170

CVE-2022-4743

·

Published

2022-09-21

·

Updated

2026-08-20

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions SDL2 versions 2.0.4 and above
Description A potential memory leak issue was discovered in the GLES CreateTexture() function in SDL render gles.c. This issue allows an attacker to cause a denial of service attack by exploiting the memory leak. The vulnerability can be exploited remotely.
Recommendations For SDL2 versions 2.0.4 and above, consider disabling the GLES CreateTexture() function as a temporary workaround to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2022-3219
ALT-PU-2024-12812
ALT-PU-2024-8940
AZL-43546
AZL-44748
DLA-3314-1
DLA-4382-1
JLSEC-2026-365
MGASA-2023-0020
OESA-2023-1029
OPENSUSE-SU-2023:0017-1
OPENSUSE-SU-2023_0069-1
OPENSUSE-SU-2024:13582-1
OPENSUSE-SU-2025:15206-1
SUSE-SU-2023:0069-1
SUSE-SU-2023_0069-1
Found an issue in the description? Have something to add? Feel free to write us 👾