Wind River Support Network

HomeDefectsLIN1018-7144

Fixed

LIN1018-7144 : Security Advisory - libsdl2 - CVE-2020-14409

Created: Jan 20, 2021 Updated: Dec 19, 2021

Resolved Date: Mar 23, 2021

Found In Version: 10.18.44.1

Fix Version: 10.18.44.22

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.

CREATE(Triage):(User=admin) [CVE-2020-14409|https://nvd.nist.gov/vuln/detail/CVE-2020-14409]

CVEs

CVE-2020-14409