Lucene search

K

Veracode Vulnerability DatabaseVERACODE:36358

HistoryJul 14, 2022 - 2:57 p.m.

Out-Of-Bound Writes

2022-07-1414:57:05

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

10

0.001 Low

EPSS

Percentile

45.7%

SDL_ttf is vulnerable to out-of-bound writes. The vulnerability exists in TTF_RenderText_Solid function which allows an attacker to cause out-of-bound writes via a crafted TTF file.

CPENameOperatorVersion
sdl2_ttf:edgeeq2.0.15-r0
sdl2_ttf:edgeeq2.0.15-r1
sdl2_ttf:edgeeq2.0.18-r0
sdl2_ttf:edgeeq2.0.15-r0
sdl2_ttf:edgeeq2.0.15-r1
sdl2_ttf:edgeeq2.0.18-r0

References

github.com/libsdl-org/SDL_ttf/commit/db1b41ab8bde6723c24b866e466cad78c2fa0448

github.com/libsdl-org/SDL_ttf/issues/187

lists.fedoraproject.org/archives/list/[email protected]/message/EAGMQMRQDTZFQW64JEW3O6HY3JYLAAHT/

lists.fedoraproject.org/archives/list/[email protected]/message/RXI3MDPR24W5557G34YHWOP2MOK6BTGB/

lists.fedoraproject.org/archives/list/[email protected]/message/XPYTEBBNHCDGPVFACC5RC5K2FZUCYTPZ/

secdb.alpinelinux.org/edge/community.yaml

0.001 Low

EPSS

Percentile

45.7%

Related for VERACODE:36358

nvd1 nessus1 openvas3 fedora3 ubuntucve1 debiancve1 osv1 cve1 alpinelinux1 prion1 cvelist1 gentoo1