Wind River Support Network

HomeDefectsLIN10-8137

Fixed

LIN10-8137 : Security Advisory - libsdl2 - CVE-2020-14409

Created: Jan 20, 2021 Updated: Dec 19, 2021

Resolved Date: Apr 1, 2021

Found In Version: 10.17.41.1

Fix Version: 10.17.41.24

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.

CREATE(Triage):(User=admin) [CVE-2020-14409|https://nvd.nist.gov/vuln/detail/CVE-2020-14409]

CVEs

CVE-2020-14409