CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1CVE-2019-12217
https://notcve.org/view.php?id=CVE-2019-12217
20 May 2019 — An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a NULL pointer dereference in the SDL stdio_read function in file/SDL_rwops.c. Se detectó un problema en libSDL2.a en Simple DirectMedia Layer (SDL) 2.0.9 cuando se usa junto con libSDL2_image.a en SDL2_image 2.0.4. Hay una diferencia de puntero NULL en la función stdio_read de SDL at file/SDL_rwops.c. • http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 7EXPL: 1CVE-2019-12216
https://notcve.org/view.php?id=CVE-2019-12216
20 May 2019 — An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is a heap-based buffer overflow in the SDL2_image function IMG_LoadPCX_RW at IMG_pcx.c. Se detectó un problema en libSDL2.a en Simple DirectMedia Layer (SDL) 2.0.9 cuando se usa junto con libSDL2_image.a en SDL2_image 2.0.4. Hay un desbordamiento de búfer basado en saturación en la función IMG_LoadPCX_RW SDL2_image at IMG_pcx.c. • https://bugzilla.libsdl.org/show_bug.cgi?id=4619 • CWE-787: Out-of-bounds Write •