CVE-2022-34568

2022-07-2822:15:08

Google

osv.dev

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

34.1%

JSON

SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.

CPENameOperatorVersion
sdl-1.2eqrelease-1.2.6
sdl-1.2eqrelease-1.2.3
sdl-1.2eqrelease-1.2.2
sdl-1.2eqrelease-1.2.5
sdl-1.2eqrelease-1.2.1
sdl-1.2eqrelease-1.2.10
sdl-1.2eqrelease-1.2.12
sdl-1.2eqrelease-1.2.13
sdl-1.2eqrelease-1.2.15
sdl-1.2eqrelease-1.2.14

Name	Operator	Version
sdl-1.2	eq	release-1.2.6
sdl-1.2	eq	release-1.2.3
sdl-1.2	eq	release-1.2.2
sdl-1.2	eq	release-1.2.5
sdl-1.2	eq	release-1.2.1
sdl-1.2	eq	release-1.2.10
sdl-1.2	eq	release-1.2.12
sdl-1.2	eq	release-1.2.13
sdl-1.2	eq	release-1.2.15
sdl-1.2	eq	release-1.2.14