OESA-2022-1645 SDL2 security update

🗓️ 11 May 2022 11:03:45Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

SDL 2.0.12 fixes overflow in SDL_BlitCopy and heap over-read in BMP Blit_3or4_to_3or4_inversed_rgb.

Reporter	Title	Published	Views	Family All 87
AstraLinux	Astra Linux - уязвимость в libsdl2	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в libsdl2	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the video component in the Simple DirectMedia Layer multimedia library, specifically the SDL_blit_copy.c file, is related to a potential overflow of integers. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.	20 Jul 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Blit_3or4_to_3or4__inversed_rgb function in the multimedia library Simple DirectMedia Layer, which involves reading data beyond the allowed buffer limits, allows an intruder to access confidential data and also trigger a service failure.	20 Jul 202100:00	–	bdu_fstec
Circl	CVE-2020-14409	19 Jan 202122:25	–	circl
Circl	CVE-2020-14410	19 Jan 202122:25	–	circl
CNNVD	Simple DirectMedia Layer Buffer Error Vulnerability	19 Jan 202100:00	–	cnnvd
CNNVD	Simple DirectMedia Layer Input Validation Error Vulnerability	19 Jan 202100:00	–	cnnvd
CVE	CVE-2020-14409	19 Jan 202100:00	–	cve
CVE	CVE-2020-14410	19 Jan 202100:00	–	cve

Source	Link
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-14409
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-14410

03 Sep 2025 06:16Current

7.1High risk

Vulners AI Score7.1

CVSS 26.8

CVSS 3.17.8

EPSS0.002

SDL overflow over read bitmap blit