Logo
vulnerabilityCVE-2019-7574
Name
CVE-2019-7574
Source
NVD ( link)Debian ( link)
Description
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.
Published Date
Updated Date
Workaround
-
Advisories
https://usn.ubuntu.com/4156-1/Third Party Advisory
https://usn.ubuntu.com/4156-2/Third Party Advisory
https://usn.ubuntu.com/4156-1/Third Party Advisory
https://usn.ubuntu.com/4156-2/Third Party Advisory

Analysis#


Affected Component
Analysis
libsdl
Exploitable

Vulnerability Ratings#


8.8
CVSSv31
6.8
CVSSv2

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
1.2.15
Exploitable
buildroot
2025.02.x
2.30.12
Not Affected
buildroot
master
1.2.15
Exploitable
buildroot
master
2.32.10
Not Affected
yocto
kirkstone
1.2.15
Exploitable
yocto
kirkstone
2.0.20
Not Affected
yocto
master
1.2.15
Exploitable
yocto
master
2.32.10
Not Affected