CVE-2022-34568
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11...
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
- Record
CVE-2022-34568- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
- Record
CVE-2022-34568- Updated
- 2026-11-02
EUVDEUVD-2022-37520 No score
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
- Record
EUVD-2022-37520- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wr7h-5wm3-p3h4
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11...
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
- Record
GHSA-wr7h-5wm3-p3h4- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-401
- Updated
- 2026-11-02
OSVAZL-43786
CVE-2022-34568 affecting package SDL 1.2.15-45
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
- Record
AZL-43786- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-34568
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
- Record
DEBIAN-CVE-2022-34568- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
Show 4 moreShow less
OSVUBUNTU-CVE-2022-34568
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
- Record
UBUNTU-CVE-2022-34568- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV No score
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.
- Record
CVE-2022-34568- Updated
- 2026-11-02
OSVMGASA-2022-0332 No score
Updated SDL12 packages fix security vulnerability
There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution. (CVE-2021-33657)
SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c. (CVE-2022-34568)
- Record
MGASA-2022-0332- Updated
- 2026-11-02
OSVUSN-5586-1 No score
libsdl1.2 vulnerability
It was discovered that SDL (Simple DirectMedia Layer) incorrectly handled memory. An attacker could potentially use this issue to cause a denial of service or other unexpected behavior.
- Record
USN-5586-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
SDLAzure Linux:2 |
through 1.2.15-45 | None known |
libsdl1.2Debian:12 |
before 1.2.15+dfsg2-8 | 1.2.15+dfsg2-8 |
SDL12Mageia:8 From an advisory covering 2 CVEs |
before 1.2.15-26.1.mga8 | 1.2.15-26.1.mga8 |
libsdl1.2Ubuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.2.15-5ubuntu21.2.15-5ubuntu31.2.15-8ubuntu11.2.15-8ubuntu1.11.2.15-8ubuntu1.1+esm11.2.15-8ubuntu1.1+esm2 |
None known |
libsdl1.2Ubuntu:Pro:16.04:LTS |
before 1.2.15+dfsg1-3ubuntu0.1+esm2, plus listed versions 1.2.15-11ubuntu11.2.15-12ubuntu11.2.15+dfsg1-31.2.15+dfsg1-3ubuntu0.11.2.15+dfsg1-3ubuntu0.1+esm1 |
1.2.15+dfsg1-3ubuntu0.1+esm2 |
libsdl2Ubuntu:16.04:LTS |
All versions, plus listed versions 2.0.2+dfsg1-6ubuntu22.0.4+dfsg1-22.0.4+dfsg1-2ubuntu12.0.4+dfsg1-2ubuntu22.0.4+dfsg1-2ubuntu2.16.04.12.0.4+dfsg1-2ubuntu2.16.04.2 |
None known |
libsdl1.2Ubuntu:18.04:LTS |
All versions, plus listed versions 1.2.15+dfsg2-0.11.2.15+dfsg2-0.1ubuntu0.11.2.15+dfsg2-0.1ubuntu0.2 |
None known |
libsdl1.2Ubuntu:20.04:LTS |
All versions, plus listed versions 1.2.15+dfsg2-5 |
None known |
libsdl1.2Ubuntu:22.04:LTS |
All versions, plus listed versions 1.2.15+dfsg2-6 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-34568 is a high vulnerability (CVSS 7.5) in Libsdl Simple Directmedia Layer, published July 28, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.11%, the 66th percentile. Fixed in libsdl1.2 1.2.15+dfsg2-8.
References
github.com/libsdl-org/SDL-1.2/issues/863
security.gentoo.org/glsa/202305-17
nvd.nist.gov/vuln/detail/CVE-2022-34568
security-tracker.debian.org/tracker/CVE-2022-34568
Show 8 moreShow less
advisories.mageia.org/MGASA-2022-0332.html
bugs.mageia.org/show_bug.cgi?id=30786
lists.suse.com/pipermail/sle-security-updates/2022-April/010735.html
lists.opensuse.org/archives/list/[email protected]/thread/RT4PK6MXMUBIFIGD2YA7HAH4DD43QU3Z
ubuntu.com/security/notices/USN-5398-1
cve.org/CVERecord?id=CVE-2022-34568