Wind River Support Network

HomeDefectsLIN1019-5926

Fixed

LIN1019-5926 : Security Advisory - libsdl2 - CVE-2020-14409

Created: Jan 20, 2021 Updated: Dec 19, 2021

Resolved Date: Feb 2, 2021

Found In Version: 10.19.45.1

Fix Version: 10.19.45.16

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.

CREATE(Triage):(User=admin) [CVE-2020-14409|https://nvd.nist.gov/vuln/detail/CVE-2020-14409]

CVEs

CVE-2020-14409