Approved changes feed: RSS · Atom

cpe:2.3:a:libsdl:simple_directmedia_layer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLibsdl (15ba1fd9-5345-5b79-a8c3-e6c30d52c45b)
ProductSimple Directmedia Layer (316badb2-2ab0-5b26-8e93-071d2c6c411f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/libsdl-org/sdl purl2cpe 2026-06-01 10:17:37.257956
pkg:gitlab/redhat/sdl purl2cpe 2026-06-01 10:17:37.257958
pkg:rpm/centos/sdl purl2cpe 2026-06-01 10:17:37.257959
pkg:rpm/fedora/sdl purl2cpe 2026-06-01 10:17:37.257961

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4743 vulnerable 2026-06-08 05:52:00.276797 Details available
A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.
Published: 2023-01-12T00:00:00.000Z
Updated: 2025-11-25T21:04:08.359Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34568 vulnerable 2026-06-08 05:44:53.663380 Details available
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
Published: 2022-07-28T00:00:00.000Z
Updated: 2024-08-03T09:15:15.239Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33657 vulnerable 2026-06-08 05:32:12.005774 Details available
There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.
Published: 2022-04-01T00:00:00.000Z
Updated: 2024-08-03T23:58:22.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14410 vulnerable 2026-06-08 05:19:23.318752 Details available
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
Published: 2021-01-19T00:00:00.000Z
Updated: 2024-08-04T12:46:34.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14409 vulnerable 2026-06-08 05:19:23.317576 Details available
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.
Published: 2021-01-19T00:00:00.000Z
Updated: 2024-08-04T12:46:34.513Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7638 vulnerable 2026-06-08 05:14:14.609402 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7637 vulnerable 2026-06-08 05:14:14.608299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7636 vulnerable 2026-06-08 05:14:14.607249 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7635 vulnerable 2026-06-08 05:14:14.606254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7578 vulnerable 2026-06-08 05:14:14.550941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7577 vulnerable 2026-06-08 05:14:14.549964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7576 vulnerable 2026-06-08 05:14:14.549070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7575 vulnerable 2026-06-08 05:14:14.547880 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7574 vulnerable 2026-06-08 05:14:14.546858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7573 vulnerable 2026-06-08 05:14:14.545899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7572 vulnerable 2026-06-08 05:14:14.543581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14906 vulnerable 2026-06-08 05:12:56.404581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13616 vulnerable 2026-06-08 05:12:52.204919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.