SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.
References
Link Providers
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00012.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00014.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00029.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00030.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00093.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00094.html cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2019:3950 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2019:3951 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2020:0293 cve-icon cve-icon
https://bugzilla.libsdl.org/show_bug.cgi?id=4538 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2021/01/msg00024.html cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2021/10/msg00032.html cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2023/02/msg00008.html cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZO47LLKKRXKMUGSRCFNHSTHG5OEBYCG/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GY6FDFPYUJ7YPY3XB5U75VJHBSVRVIKO/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HEH5RO7XZA5DDCO2XOP4QHDEELQQTYV2/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UITVW4WTOOCECLLWPQCV7VWMU66DN255/ cve-icon cve-icon
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VDNX3RVXTWELBXQDNERNVVKDGKDF2MPB/ cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2019-13616 cve-icon
https://security.gentoo.org/glsa/202305-17 cve-icon cve-icon
https://usn.ubuntu.com/4156-1/ cve-icon cve-icon
https://usn.ubuntu.com/4156-2/ cve-icon cve-icon
https://usn.ubuntu.com/4238-1/ cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2019-13616 cve-icon
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-07-16T00:00:00

Updated: 2024-08-04T23:57:39.517Z

Reserved: 2019-07-16T00:00:00

Link: CVE-2019-13616

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-07-16T17:15:12.657

Modified: 2023-11-07T03:03:52.470

Link: CVE-2019-13616

cve-icon Redhat

Severity : Important

Publid Date: 2019-07-30T00:00:00Z

Links: CVE-2019-13616 - Bugzilla