Logo
vulnerabilityCVE-2019-7576
Name
CVE-2019-7576
Source
NVD ( link)Debian ( link)
Description
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (outside the wNumCoef loop).
Published Date
Updated Date
Workaround
-
Advisories
https://usn.ubuntu.com/4156-1/Third Party Advisory
https://usn.ubuntu.com/4156-2/Third Party Advisory
https://usn.ubuntu.com/4156-1/Third Party Advisory
https://usn.ubuntu.com/4156-2/Third Party Advisory

Analysis#


Affected Component
Analysis
libsdl
Exploitable

Vulnerability Ratings#


8.8
CVSSv31
6.8
CVSSv2

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
1.2.15
Exploitable
buildroot
2025.02.x
2.30.12
Not Affected
buildroot
master
1.2.15
Exploitable
buildroot
master
2.32.10
Not Affected
yocto
kirkstone
1.2.15
Exploitable
yocto
kirkstone
2.0.20
Not Affected
yocto
master
1.2.15
Exploitable
yocto
master
2.32.10
Not Affected