CVE-2019-13616

PoC —

CVSS 3.1

8.1 high

EPSS

4%p89

Published

Jul 16, 2019 (Jul 16, 2019)

Modified

Jun 17, 2026

Description

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.

Vendors: libsdl debian opensuse fedoraproject canonical redhat
Products: simple directmedia layer, debian linux, backports sle, leap, fedora, ubuntu linux, enterprise linux, enterprise linux desktop, enterprise linux eus, enterprise linux server, enterprise linux server aus, enterprise linux server tus
Weakness: CWE-125
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (3.7%)

In the news0 stories

No ingested article mentions this CVE yet.