<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 11 Oct 2026 19:05:12 +0000</lastBuildDate>
    <item>
      <title>CVE-2020-14409</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2020-14409</link>
      <description>&lt;p&gt;SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;SDL (Simple DirectMedia Layer) through 2.0.12 has an Integer Overflow (and resultant SDL_memcpy heap corruption) in SDL_BlitCopy in video/SDL_blit_copy.c via a crafted .BMP file.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2020-14409</guid>
    </item>
    <item>
      <title>USN-5274-1 — libsdl2 vulnerabilities</title>
      <link>https://vulnerability.circl.lu/vuln/usn-5274-1</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:18.04:LTS: libsdl2, Ubuntu:Pro:20.04:LTS: libsdl2&lt;/p&gt;
&lt;p&gt;It was discovered that Simple DirectMedia Layer library incorrectly handled
memory when parsing certain specially crafted .BMP files. An attacker could possibly use
these issues to crash the application or execute arbitrary code.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:Pro:18.04:LTS: libsdl2, Ubuntu:Pro:20.04:LTS: libsdl2&lt;/p&gt;
&lt;p&gt;It was discovered that Simple DirectMedia Layer library incorrectly handled
memory when parsing certain specially crafted .BMP files. An attacker could possibly use
these issues to crash the application or execute arbitrary code.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/usn-5274-1</guid>
    </item>
  </channel>
</rss>
