Alpine/sdl2_ttf: high 7.8
SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). This vulnerability is triggered via a crafted TTF file.
Action: Upgrade sdl2_ttf to 2.20.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.20.0-r0 | - |
Fixed versions
| 2.20.0-r0 |
Sources
- osv: ALPINE-CVE-2022-27470#Alpine:v3.23/sdl2_ttf
- https://security.alpinelinux.org/vuln/CVE-2022-27470
published · modified · JSON