Wind River Support Network

HomeDefectsLIN1018-7145

Fixed

LIN1018-7145 : Security Advisory - libsdl2 - CVE-2020-14410

Created: Jan 20, 2021 Updated: May 13, 2022

Resolved Date: Mar 23, 2021

Found In Version: 10.18.44.1

Fix Version: 10.18.44.22

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.

CREATE(Triage):(User=admin) CVE-2020-14410 (https://nvd.nist.gov/vuln/detail/CVE-2020-14410)

CVEs

CVE-2020-14410