buildroot ▾
›
master ▾
›
vulnerability
›
CVE-2019-13616
Component Overview
Vulnerability Overview
Name
CVE-2019-13616
Source
NVD (
link
)
Debian (
link
)
Description
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
CWEs
CWE-125
Published Date
Jul 16, 2019
Updated Date
Jun 17, 2026
Workaround
-
Advisories
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00030.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00093.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00094.html
Mailing List
https://access.redhat.com/errata/RHSA-2019:3950
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3951
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0293
Third Party Advisory
https://bugzilla.libsdl.org/show_bug.cgi?id=4538
Exploit
https://lists.debian.org/debian-lts-announce/2021/01/msg00024.html
Mailing List
https://lists.debian.org/debian-lts-announce/2021/10/msg00032.html
Mailing List
https://lists.debian.org/debian-lts-announce/2023/02/msg00008.html
Mailing List
https://usn.ubuntu.com/4156-1/
Third Party Advisory
https://usn.ubuntu.com/4156-2/
Third Party Advisory
https://usn.ubuntu.com/4238-1/
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00030.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00093.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00094.html
Mailing List
https://access.redhat.com/errata/RHSA-2019:3950
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3951
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0293
Third Party Advisory
https://bugzilla.libsdl.org/show_bug.cgi?id=4538
Exploit
https://lists.debian.org/debian-lts-announce/2021/01/msg00024.html
Mailing List
https://lists.debian.org/debian-lts-announce/2021/10/msg00032.html
Mailing List
https://lists.debian.org/debian-lts-announce/2023/02/msg00008.html
Mailing List
https://usn.ubuntu.com/4156-1/
Third Party Advisory
https://usn.ubuntu.com/4156-2/
Third Party Advisory
https://usn.ubuntu.com/4238-1/
Third Party Advisory
Analysis
#
Affected Component
Analysis
sdl
Exploitable
Vulnerability Ratings
#
8.1
CVSSv31
5.8
CVSSv2
Others affected components
#
Name
Project
Project Version
Version
Status
sdl
buildroot
2025.02.x
1.2.15
Exploitable
sdl2
buildroot
2025.02.x
2.30.12
Not Affected
libsdl2
yocto
kirkstone
2.0.20
Not Affected
libsdl2
yocto
master
2.32.10
Not Affected
libsdl2
yocto
scarthgap
2.30.1
Not Affected