CVE-2019-7637: Buffer Overflow
Published Feb 8, 2019
·Updated
Last updated 25 August 2025
Other sources
SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDLFillRect in video/SDLsurface.c.
— Launchpad
Affected Software
42 affected componentsFixes available
libSDL Simple DirectMedia Layer<=1.2.15
libSDL Simple DirectMedia Layer>=2.0.0<=2.0.9
Debian Debian Linux=8.0
Debian Debian Linux=9.0
openSUSE Leap=15.0
openSUSE Leap=15.1
openSUSE Leap=42.3
Fedoraproject Fedora=31
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=18.04
Canonical Ubuntu Linux=19.04
debian/libsdl1.2
1.2.15+dfsg2-61.2.15+dfsg2-8
debian/libsdl2
2.0.14+dfsg2-3+deb11u12.0.14+dfsg2-3+deb11u22.26.5+dfsg-12.32.4+dfsg-12.32.10+dfsg-6
alpine/sdl<1.2.15-r11
1.2.15-r11
alpine/sdl<1.2.15-r11
1.2.15-r11
alpine/sdl<1.2.15-r11
1.2.15-r11
alpine/sdl<1.2.15-r11
1.2.15-r11
alpine/sdl<1.2.15-r11
1.2.15-r11
alpine/sdl<1.2.15-r11
1.2.15-r11
alpine/sdl<1.2.15-r8
1.2.15-r8
alpine/sdl<1.2.15-r9
1.2.15-r9
alpine/sdl<1.2.15-r10
1.2.15-r10
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
alpine/sdl2<2.0.10-r0
2.0.10-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libsdl1.2to a version that resolves this vulnerability.Fixed in 1.2.15+dfsg2-6Fixed in 1.2.15+dfsg2-8 - Upgrade
Upgrade
debian/libsdl2to a version that resolves this vulnerability.Fixed in 2.0.14+dfsg2-3+deb11u1Fixed in 2.0.14+dfsg2-3+deb11u2Fixed in 2.26.5+dfsg-1Fixed in 2.32.4+dfsg-1Fixed in 2.32.10+dfsg-6 - Upgrade
Upgrade
alpine/sdlto a version that resolves this vulnerability.Fixed in 1.2.15-r11 - Upgrade
Upgrade
alpine/sdlto a version that resolves this vulnerability.Fixed in 1.2.15-r8 - Upgrade
Upgrade
alpine/sdlto a version that resolves this vulnerability.Fixed in 1.2.15-r9 - Upgrade
Upgrade
alpine/sdlto a version that resolves this vulnerability.Fixed in 1.2.15-r10 - Upgrade
Upgrade
alpine/sdl2to a version that resolves this vulnerability.Fixed in 2.0.10-r0
Event History
Feb 8, 2019
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
via NVD·11:29 AM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·11:29 AM
DescriptionSeverityAffected Software