CVE-2019-7635: High severity libSDL Simple DirectMedia Layer vulnerability
Published Feb 8, 2019
·Updated
Last updated 18 August 2025
Other sources
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDLblit1.c.
— Launchpad
Affected Software
19 affected componentsFixes available
libSDL Simple DirectMedia Layer<=1.2.15
libSDL Simple DirectMedia Layer>=2.0.0<=2.0.9
openSUSE Backports SLE=15.0
openSUSE Backports SLE=15.0-sp1
openSUSE Leap=15.0
openSUSE Leap=15.1
openSUSE Leap=42.3
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Fedoraproject Fedora=31
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=19.04
debian/libsdl1.2
1.2.15+dfsg2-61.2.15+dfsg2-8
debian/libsdl2
2.0.14+dfsg2-3+deb11u12.0.14+dfsg2-3+deb11u22.26.5+dfsg-12.32.4+dfsg-12.32.10+dfsg-6
debian/libsdl2-image
2.0.5+dfsg1-22.6.3+dfsg-12.8.8+dfsg-12.8.8+dfsg-2
debian/sdl-image1.2
1.2.12-121.2.12-131.2.12-14
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Feb 8, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Feb 19, 2026
Data Sourced
via Ubuntu·11:08 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·11:08 PM
Description
Data Sourced
via Debian·11:08 PM
DescriptionAffected Software