CVE-2019-12222: Medium severity libSDL Simple DirectMedia Layer vulnerability
Published May 20, 2019
·Updated
An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9. There is an out-of-bounds read in the function SDLInvalidateMap at video/SDLpixels.c.
Affected Software
3 affected componentsFixes available
libSDL Simple DirectMedia Layer=2.0.9
debian/libsdl2-image
2.0.5+dfsg1-22.6.3+dfsg-12.8.8+dfsg-12.8.8+dfsg-2
debian/sdl-image1.2
1.2.12-121.2.12-131.2.12-14
Remediation
Patch Available
Patch Available
Event History
May 20, 2019
CVE Published
via MITRE·04:33 PM
Data Sourced
via MITRE·04:33 PM
Description
Feb 19, 2026
Data Sourced
via Ubuntu·11:10 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·11:11 PM
Description
Data Sourced
via Debian·11:11 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2019-12222?
CVE-2019-12222 is a vulnerability in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 that allows for an out-of-bounds read.
2
What is the severity of CVE-2019-12222?
CVE-2019-12222 has a severity rating of 6.5 (medium).
3
How does CVE-2019-12222 affect Libsdl Simple Directmedia Layer?
Libsdl Simple Directmedia Layer version 2.0.9 is affected by CVE-2019-12222.
4
How can I fix the CVE-2019-12222 vulnerability in Debian?
For Debian, upgrade libsdl2-image to version 2.0.5+dfsg1-2 or higher.
5
How can I fix the CVE-2019-12222 vulnerability in Ubuntu?
For Ubuntu, upgrade libsdl2-image to version 2.0.0+dfsg-3+ or higher.