Logo
›
›vulnerability›CVE-2022-4743
Name
CVE-2022-4743
Source
NVD ( link)Debian ( link)
Description
A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.
CWEs
CWE-401 CWE-401
Published Date
Updated Date
Workaround
-
Advisories
https://access.redhat.com/security/cve/CVE-2022-4743Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2156290Issue Tracking
https://github.com/libsdl-org/SDL/commit/00b67f55727bc0944c3266e2b875440da132ce4bPatch
https://github.com/libsdl-org/SDL/pull/6269Patch
https://access.redhat.com/security/cve/CVE-2022-4743Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2156290Issue Tracking
https://github.com/libsdl-org/SDL/commit/00b67f55727bc0944c3266e2b875440da132ce4bPatch
https://github.com/libsdl-org/SDL/pull/6269Patch

Analysis#

Affected Component
Analysis
libsdl2
Patched

Vulnerability Ratings#

7.5
CVSSv31
7.5
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
sdl
buildroot
2025.02.x
1.2.15
Not Affected
sdl2
buildroot
2025.02.x
2.30.12
Not Affected
sdl
buildroot
master
1.2.15
Not Affected
sdl2
buildroot
master
2.32.10
Not Affected
libsdl2
yocto
master
2.32.10
Not Affected
libsdl2
yocto
scarthgap
2.30.1
Not Affected

Resolved with patches#

libsdl2 (yocto:kirkstone)

#
Title
Author
Resolve
1
Fix potential memory leak in GLES_CreateTextur
Changqing Li <changqing.li@windriver.com>
CVE-2022-4743