tocsin

Debian/libsdl2: medium 6.5

SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.

Action: Upgrade libsdl2 to 2.0.10+dfsg1-1 or later.

Affected

introducedfixedlast affected
02.0.10+dfsg1-1-

Fixed versions

2.0.10+dfsg1-1

Sources

published · modified · JSON