Every CVE Search/ Get API key

CVE-2022-4743

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in...

7.5 HighFix available

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.32%Up 0.4 points since Jan 13, 2023
90%50%10%1%

What each source reports

NVD Score used 7.5

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

Record
CVE-2022-4743
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-401
Updated
2026-11-02
CVE List 7.5

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

Record
CVE-2022-4743
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-401
Updated
2026-11-02
EUVDEUVD-2022-52041 7.5

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

Record
EUVD-2022-52041
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-94g7-4r7x-4rfv 7.5

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in...

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

Record
GHSA-94g7-4r7x-4rfv
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-401
Updated
2026-11-02
OSVAZL-43546 7.5

CVE-2022-4743 affecting package SDL2 2.24.0-2

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

Record
AZL-43546
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-44748 7.5

CVE-2022-4743 affecting package SDL2 for versions less than 2.30.9-1

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

Record
AZL-44748
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 11 moreShow less
OSV 7.5

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

Record
CVE-2022-4743
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-4743 7.5

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

Record
DEBIAN-CVE-2022-4743
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVJLSEC-2026-365 7.5

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

Record
JLSEC-2026-365
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1029 7.5

SDL2 security update

Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device.

Security Fix(es):

A memory leak issue was discovered in SDL2 version >= SDL2-2.0.8

See the link below for details: https://github.com/libsdl-org/SDL/pull/6269 https://github.com/libsdl-org/SDL/commit/00b67f55727bc0944c3266e2b875440da132ce4b(CVE-2022-4743)

Record
OESA-2023-1029
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-4743 7.5

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

Record
UBUNTU-CVE-2022-4743
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVMGASA-2023-0020 No score

Updated sdl2 packages fix security vulnerability

Potential memory leak when creating a texture for an OpenGL ES image (CVE-2022-4743)

Record
MGASA-2023-0020
Updated
2026-11-02
OSVopenSUSE-SU-2023:0017-1 No score

Security update for SDL2

This update for SDL2 fixes the following issues:

  • CVE-2022-4743: Fixed potential memory leak in GLES_CreateTexture (boo#1206727).
Record
openSUSE-SU-2023:0017-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13582-1 No score

SDL2-devel-2.28.5-2.1 on GA media

These are all security issues fixed in the SDL2-devel-2.28.5-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13582-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15206-1 No score

SDL2-2.32.8-1.1 on GA media

These are all security issues fixed in the SDL2-2.32.8-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15206-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2022-4743 No score

CVE-2022-4743 in libsdl2 - Patched by Root

Root has patched CVE-2022-4743 in the libsdl2 package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2022-4743
Updated
2026-11-02
OSVSUSE-SU-2023:0069-1 No score

Security update for SDL2

This update for SDL2 fixes the following issues:

  • CVE-2022-4743: Fixed a potential memory leak when creating a texture for an OpenGL ES image (bsc#1206727).
Record
SUSE-SU-2023:0069-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
SDL2
Azure Linux:2
 through 2.24.0-2 None known
SDL2
Azure Linux:3
 before 2.30.9-1
2.30.9-1
libsdl2
Debian:12
 before 2.26.0+dfsg-1
2.26.0+dfsg-1
libsdl2
Debian:13
 before 2.26.0+dfsg-1
2.26.0+dfsg-1
libsdl2
Debian:14
 before 2.26.0+dfsg-1
2.26.0+dfsg-1
libsdl2
Debian:10
From an advisory covering 16 CVEs
 before 2.0.9+dfsg1-1+deb10u1, plus listed versions
2.0.9+dfsg1-1
2.0.9+dfsg1-1+deb10u1
libsdl2
Debian:11
 before 2.0.14+dfsg2-3+deb11u2, plus listed versions
2.0.14+dfsg2-32.0.14+dfsg2-3+deb11u1
2.0.14+dfsg2-3+deb11u2
SDL2_jll
Julia
 before 2.32.10+0
2.32.10+0
sdl2
Mageia:8
 before 2.0.14-1.2.mga8
2.0.14-1.2.mga8
SDL2
openEuler:20.03-LTS-SP1
 before 2.0.12-2.oe1
2.0.12-2.oe1
Show 15 moreShow less
Affected packages
PackageAffectedFixed
SDL2
openEuler:20.03-LTS-SP3
 before 2.0.12-2.oe1
2.0.12-2.oe1
SDL2
openEuler:22.03-LTS
 before 2.0.12-5.oe2203sp1
2.0.12-5.oe2203sp1
SDL2
openEuler:22.03-LTS-SP1
 before 2.0.12-5.oe2203sp1
2.0.12-5.oe2203sp1
SDL2
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
 before 2.0.8-150200.11.9.1
2.0.8-150200.11.9.1
SDL2
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 2.0.8-150200.11.9.1
2.0.8-150200.11.9.1
SDL2
SUSE:Linux Enterprise Real Time 15 SP3
 before 2.0.8-150200.11.9.1
2.0.8-150200.11.9.1
SDL2
openSUSE:Leap 15.4
 before 2.0.8-150200.11.9.1
2.0.8-150200.11.9.1
libsdl2
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2.0.0+dfsg1-22.0.0+dfsg1-32.0.1+dfsg1-12.0.1+dfsg1-1ubuntu12.0.2+dfsg1-3
Show 5 moreShow less
2.0.2+dfsg1-3ubuntu12.0.2+dfsg1-3ubuntu1.12.0.2+dfsg1-3ubuntu1.22.0.2+dfsg1-3ubuntu1.32.0.2+dfsg1-3ubuntu1.3+esm1
 None known
libsdl2
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.0.2+dfsg1-6ubuntu22.0.4+dfsg1-22.0.4+dfsg1-2ubuntu12.0.4+dfsg1-2ubuntu22.0.4+dfsg1-2ubuntu2.16.04.12.0.4+dfsg1-2ubuntu2.16.04.2
 None known
libsdl2
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.0.6+dfsg1-3ubuntu12.0.6+dfsg1-4ubuntu12.0.7+dfsg1-3ubuntu12.0.8+dfsg1-1ubuntu12.0.8+dfsg1-1ubuntu1.18.04.12.0.8+dfsg1-1ubuntu1.18.04.32.0.8+dfsg1-1ubuntu1.18.04.42.0.8+dfsg1-1ubuntu1.18.04.4+esm1
 None known
libsdl2
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2.0.10+dfsg1-1ubuntu12.0.10+dfsg1-1ubuntu42.0.10+dfsg1-1ubuntu62.0.10+dfsg1-1ubuntu72.0.10+dfsg1-1ubuntu82.0.10+dfsg1-2ubuntu52.0.10+dfsg1-32.0.10+dfsg1-3ubuntu0.1~esm1
 None known
libsdl2
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.0.14+dfsg2-32.0.16+dfsg1-52.0.18+dfsg-42.0.18+dfsg-52.0.20+dfsg-22.0.20+dfsg-2build12.0.20+dfsg-2ubuntu1.22.04.1
 None known
SDL2
SUSE:Package Hub 12
 before 2.0.5-10.1
2.0.5-10.1
SDL2
openSUSE:Tumbleweed
From an advisory covering 12 CVEs
 before 2.28.5-2.1
2.28.5-2.1
SDL2
openSUSE:Tumbleweed
From an advisory covering 17 CVEs
 before 2.32.8-1.1
2.32.8-1.1

History

History
RecordedChangedSources
affected, factsOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-4743 is a high vulnerability (CVSS 7.5) in Libsdl Simple Directmedia Layer, published January 11, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.32%, the 71st percentile. Fixed in SDL2 2.30.9-1.

References

Show 31 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open