Simple DirectMedia Layer 2.0.9 libSDL2.a SDL unknown vulnerability

A vulnerability classified as critical was found in Simple DirectMedia Layer 2.0.9. This vulnerability affects the function SDL of the file libSDL2.a. The impact remains unknown. CVE summarizes:

An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an invalid free error in the SDL function SDL_SetError_REAL at SDL_error.c.

The weakness was published 05/20/2019. This vulnerability was named CVE-2019-12219 since 05/20/2019. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 05/21/2019).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Similar entries are available at 135277, 135278, 135279 and 135281.

Name

Class: Unknown
Local: Yes
Remote: No

Availability: ?
Status: Not defined

Price Prediction: ?
Current Price Estimation: ?

Threat Intelligenceinfoedit

Threat: ?
Adversaries: ?
Geopolitics: ?
Economy: ?
Predictions: ?
Remediation: ?Recommended: no mitigation known
0-Day Time: ?05/20/2019 Advisory disclosed
05/20/2019 +0 days CVE assigned
05/21/2019 +1 days VulDB entry created
05/21/2019 +0 days VulDB last updateCVE: CVE-2019-12219 (?)
See also: ?Created: 05/21/2019 07:38 AM
Complete: ?

Comments are closed.