CVE-2020-14410
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in...
5.4 MediumFix available
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- Low
Exploit likelihood
1.68%Up 0.6 points since Apr 14, 2021
What each source reports
NVD Score used
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
- Record
CVE-2020-14410- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
- Record
CVE-2020-14410- Updated
- 2026-11-02
EUVDEUVD-2020-6549 No score
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
- Record
EUVD-2020-6549- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vw4m-8vvh-crhf
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in...
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
- Record
GHSA-vw4m-8vvh-crhf- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVBELL-CVE-2020-14410
CVE-2020-14410 does not affect BellSoft software
- Record
BELL-CVE-2020-14410- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
OSV
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
- Record
CVE-2020-14410- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
Show 15 moreShow less
OSVDEBIAN-CVE-2020-14410
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
- Record
DEBIAN-CVE-2020-14410- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
OSVJLSEC-2026-363
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
- Record
JLSEC-2026-363- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:P - Updated
- 2026-11-02
OSVOESA-2022-1645
SDL2 security update
Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device.
Security Fix(es):
SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.(CVE-2020-14409) SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.(CVE-2020-14410)
- Record
OESA-2022-1645- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-14410
SDL (Simple DirectMedia Layer) through 2.0.12 has a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP file.
- Record
UBUNTU-CVE-2020-14410- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
OSVMGASA-2021-0201 No score
Updated sdl2 packages fix security vulnerabilities
This update fixes two security vulnerabilities which could result in heap corruption or over-read with crafted .BMP files (CVE-2020-14409, CVE-2020-14410).
- Record
MGASA-2021-0201- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:0104-1 No score
Security update for SDL2
This update for SDL2 fixes the following issues:
- CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP (bsc#1181202).
- CVE-2020-14410: Fixed heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP (bsc#1181201).
- Record
openSUSE-SU-2022:0104-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13582-1 No score
SDL2-devel-2.28.5-2.1 on GA media
These are all security issues fixed in the SDL2-devel-2.28.5-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13582-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15206-1 No score
SDL2-2.32.8-1.1 on GA media
These are all security issues fixed in the SDL2-2.32.8-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15206-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0104-1 No score
Security update for SDL2
This update for SDL2 fixes the following issues:
- CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP (bsc#1181202).
- CVE-2020-14410: Fixed heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP (bsc#1181201).
- Record
SUSE-SU-2022:0104-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0104-2 No score
Security update for SDL2
This update for SDL2 fixes the following issues:
- CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP (bsc#1181202).
- CVE-2020-14410: Fixed heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c via a crafted .BMP (bsc#1181201).
- Record
SUSE-SU-2022:0104-2- Updated
- 2026-11-02
OSVSUSE-SU-2022:0825-1 No score
Security update for SDL2
This update for SDL2 fixes the following issues:
- CVE-2020-14409, CVE-2020-14410: Fixed overflow in surface pitch calculation (bsc#1181201, bsc#1181202).
- Record
SUSE-SU-2022:0825-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1273-1 No score
Security update for SDL
This update for SDL fixes the following issues:
- CVE-2020-14409: Fixed an integer overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c. (bsc#1181202)
- CVE-2020-14410: Fixed a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c. (bsc#1181201)
- CVE-2021-33657: Fixed a Heap overflow problem in video/SDL_pixels.c. (bsc#1198001)
- Record
SUSE-SU-2022:1273-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1312-1 No score
Security update for SDL
This update for SDL fixes the following issues:
- CVE-2020-14409: Fixed an integer overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c. (bsc#1181202)
- CVE-2020-14410: Fixed a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c. (bsc#1181201)
- CVE-2021-33657: Fixed a Heap overflow problem in video/SDL_pixels.c. (bsc#1198001)
- Record
SUSE-SU-2022:1312-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:14943-1 No score
Security update for SDL
This update for SDL fixes the following issues:
- CVE-2020-14410: Fixed a heap-based buffer over-read in Blit_3or4_to_3or4__inversed_rgb in video/SDL_blit_N.c (bsc#1181201).
- CVE-2019-7637: Fixed a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c (bsc#1124825).
- CVE-2021-33657: Fix a buffer overflow when parsing a crafted BMP image (bsc#1198001).
- CVE-2020-14409: Fixed an integer overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c (bsc#1181202).
- Record
SUSE-SU-2022:14943-1- Updated
- 2026-11-02
OSVUSN-5274-1 No score
libsdl2 vulnerabilities
It was discovered that Simple DirectMedia Layer library incorrectly handled memory when parsing certain specially crafted .BMP files. An attacker could possibly use these issues to crash the application or execute arbitrary code.
- Record
USN-5274-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libsdl2Debian:12 |
before 2.0.14+dfsg2-2 | 2.0.14+dfsg2-2 |
libsdl2Debian:13 |
before 2.0.14+dfsg2-2 | 2.0.14+dfsg2-2 |
libsdl2Debian:14 |
before 2.0.14+dfsg2-2 | 2.0.14+dfsg2-2 |
libsdl2Debian:9 From an advisory covering 9 CVEs |
before 2.0.5+dfsg1-2+deb9u1, plus listed versions 2.0.5+dfsg1-2 |
2.0.5+dfsg1-2+deb9u1 |
libsdl2Debian:10 From an advisory covering 16 CVEs |
before 2.0.9+dfsg1-1+deb10u1, plus listed versions 2.0.9+dfsg1-1 |
2.0.9+dfsg1-1+deb10u1 |
SDL2_jllJulia |
2.0.12+0 up to 2.24.2+0 | 2.24.2+0 |
sdl2Mageia:7 From an advisory covering 2 CVEs |
before 2.0.10-1.1.mga7 | 2.0.10-1.1.mga7 |
mingw-SDL2Mageia:7 From an advisory covering 2 CVEs |
before 2.0.10-1.1.mga7 | 2.0.10-1.1.mga7 |
SDL2openEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs |
before 2.0.12-1.oe1 | 2.0.12-1.oe1 |
SDL2openEuler:20.03-LTS-SP3 From an advisory covering 2 CVEs |
before 2.0.12-1.oe1 | 2.0.12-1.oe1 |
Show 71 moreShow less
| Package | Affected | Fixed |
|---|---|---|
SDL2openEuler:22.03-LTS From an advisory covering 2 CVEs |
before 2.0.12-4.oe2203 | 2.0.12-4.oe2203 |
SDL2SUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 2 CVEs |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise Module for Package Hub 15 SP3 From an advisory covering 2 CVEs |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 2 CVEs |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 2 CVEs |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 2 CVEs |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 2 CVEs |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 2 CVEs |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Manager Proxy 4.1 From an advisory covering 2 CVEs |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Manager Retail Branch Server 4.1 From an advisory covering 2 CVEs |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Manager Server 4.1 From an advisory covering 2 CVEs |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Enterprise Storage 7 From an advisory covering 2 CVEs |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise Real Time 15 SP2 From an advisory covering 2 CVEs |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2SUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 2 CVEs |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 2 CVEs |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 2 CVEs |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 2 CVEs |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise Server 15-LTSS From an advisory covering 2 CVEs |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 2 CVEs |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 2 CVEs |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 2 CVEs |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 2 CVEs |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDL2SUSE:Enterprise Storage 6 From an advisory covering 2 CVEs |
before 2.0.8-3.18.1 | 2.0.8-3.18.1 |
SDLSUSE:Linux Enterprise Module for Desktop Applications 15 SP3 From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Module for Package Hub 15 SP3 From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Real Time 15 SP2 From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Manager Proxy 4.1 From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Manager Retail Branch Server 4.1 From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Manager Server 4.1 From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Enterprise Storage 6 From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:Enterprise Storage 7 From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLopenSUSE:Leap 15.3 From an advisory covering 3 CVEs |
before 1.2.15-150000.3.19.1 | 1.2.15-150000.3.19.1 |
SDLSUSE:HPE Helion OpenStack 8 From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:OpenStack Cloud 8 From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:OpenStack Cloud 9 From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 3 CVEs |
before 1.2.15-15.17.1 | 1.2.15-15.17.1 |
SDLSUSE:Linux Enterprise Point of Sale 11 SP3 From an advisory covering 4 CVEs |
before 1.2.13-106.21.1 | 1.2.13-106.21.1 |
SDLSUSE:Linux Enterprise Server 11 SP4-LTSS From an advisory covering 4 CVEs |
before 1.2.13-106.21.1 | 1.2.13-106.21.1 |
libsdl2Ubuntu:Pro:18.04:LTS |
before 2.0.8+dfsg1-1ubuntu1.18.04.4+esm1, plus listed versions 2.0.6+dfsg1-3ubuntu12.0.6+dfsg1-4ubuntu12.0.7+dfsg1-3ubuntu12.0.8+dfsg1-1ubuntu12.0.8+dfsg1-1ubuntu1.18.04.12.0.8+dfsg1-1ubuntu1.18.04.32.0.8+dfsg1-1ubuntu1.18.04.4 |
2.0.8+dfsg1-1ubuntu1.18.04.4+esm1 |
libsdl2Ubuntu:Pro:20.04:LTS |
before 2.0.10+dfsg1-3ubuntu0.1~esm1, plus listed versions 2.0.10+dfsg1-1ubuntu12.0.10+dfsg1-1ubuntu42.0.10+dfsg1-1ubuntu62.0.10+dfsg1-1ubuntu72.0.10+dfsg1-1ubuntu82.0.10+dfsg1-2ubuntu52.0.10+dfsg1-3 |
2.0.10+dfsg1-3ubuntu0.1~esm1 |
libsdl2Ubuntu:Pro:18.04:LTS From an advisory covering 2 CVEs |
before 2.0.8+dfsg1-1ubuntu1.18.04.4+esm1, plus listed versions 2.0.6+dfsg1-3ubuntu12.0.6+dfsg1-4ubuntu12.0.7+dfsg1-3ubuntu12.0.8+dfsg1-1ubuntu12.0.8+dfsg1-1ubuntu1.18.04.12.0.8+dfsg1-1ubuntu1.18.04.32.0.8+dfsg1-1ubuntu1.18.04.4 |
2.0.8+dfsg1-1ubuntu1.18.04.4+esm1 |
libsdl2Ubuntu:Pro:20.04:LTS From an advisory covering 2 CVEs |
before 2.0.10+dfsg1-3ubuntu0.1~esm1, plus listed versions 2.0.10+dfsg1-1ubuntu12.0.10+dfsg1-1ubuntu42.0.10+dfsg1-1ubuntu62.0.10+dfsg1-1ubuntu72.0.10+dfsg1-1ubuntu82.0.10+dfsg1-2ubuntu52.0.10+dfsg1-3 |
2.0.10+dfsg1-3ubuntu0.1~esm1 |
pdnsSUSE:Package Hub 15 SP3 From an advisory covering 2 CVEs |
before 4.3.1-bp153.2.3.1 | 4.3.1-bp153.2.3.1 |
pdnsopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 4.3.1-bp153.2.3.1 | 4.3.1-bp153.2.3.1 |
SDL2openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2.0.8-11.3.1 | 2.0.8-11.3.1 |
SDL2openSUSE:Tumbleweed From an advisory covering 12 CVEs |
before 2.28.5-2.1 | 2.28.5-2.1 |
SDL2openSUSE:Tumbleweed From an advisory covering 17 CVEs |
before 2.32.8-1.1 | 2.32.8-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-14410 is a medium vulnerability (CVSS 5.4) in Libsdl Simple Directmedia Layer, published January 19, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.68%, the 77th percentile. Fixed in libsdl2 2.0.14+dfsg2-2.
References
bugzilla.libsdl.org/show_bug.cgi?id=5200
hg.libsdl.org/SDL/rev/3f9b4e92c1d9
lists.debian.org/debian-lts-announce/2021/01/msg00024.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FS32YCEJLQ2FYUWSWYI2ZMQWQEAWJNR
security.gentoo.org/glsa/202107-55
Show 43 moreShow less
nvd.nist.gov/vuln/detail/CVE-2020-14410
github.com/advisories/GHSA-vw4m-8vvh-crhf
docs.bell-sw.com/security/cves/CVE-2020-14410
security-tracker.debian.org/tracker/CVE-2020-14410
advisories.mageia.org/MGASA-2021-0201.html
bugs.mageia.org/show_bug.cgi?id=28275
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1645
suse.com/support/update/announcement/2022/suse-su-20220104-1
bugzilla.suse.com/1181201
ubuntu.com/security/CVE-2020-14410
cve.org/CVERecord?id=CVE-2020-14410
lists.opensuse.org/archives/list/[email protected]/thread/GCAJV7QU7NXYUTY7OMBOV6LAES2X326R