GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

OPENSUSE-SU-2025:15205-1

Vulnerability from csaf_opensuse - Published: 2025-07-03 00:00 - Updated: 2025-07-03 00:00
Summary
SDL-1.2.15-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: SDL-1.2.15-1.1 on GA media
Description of the patch: These are all security issues fixed in the SDL-1.2.15-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2025-15205
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2019-13616
4.4 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2019-7572
4.4 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2019-13616
Threats
Impact moderate
CVE-2019-7573
4.4 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2019-13616
Threats
Impact moderate
CVE-2019-7574
4.4 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2019-13616
Threats
Impact moderate
CVE-2019-7575
5.3 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
Recommended 4 products, the same list as for CVE-2019-13616
Threats
Impact moderate
CVE-2019-7577
4.4 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2019-13616
Threats
Impact moderate
CVE-2019-7578
5.1 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2019-13616
Threats
Impact moderate
CVE-2019-7635
4.4 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2019-13616
Threats
Impact moderate
CVE-2019-7636
4.4 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2019-13616
Threats
Impact moderate
CVE-2019-7637
5.3 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected products
Recommended 4 products, the same list as for CVE-2019-13616
Threats
Impact moderate
CVE-2019-7638
4.4 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected products
Recommended 4 products, the same list as for CVE-2019-13616
Threats
Impact moderate
CVE-2021-33657
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 4 products, the same list as for CVE-2019-13616
Threats
Impact important
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://www.suse.com/security/cve/CVE-2019-13616/ self
https://www.suse.com/security/cve/CVE-2019-7572/ self
https://www.suse.com/security/cve/CVE-2019-7573/ self
https://www.suse.com/security/cve/CVE-2019-7574/ self
https://www.suse.com/security/cve/CVE-2019-7575/ self
https://www.suse.com/security/cve/CVE-2019-7577/ self
https://www.suse.com/security/cve/CVE-2019-7578/ self
https://www.suse.com/security/cve/CVE-2019-7635/ self
https://www.suse.com/security/cve/CVE-2019-7636/ self
https://www.suse.com/security/cve/CVE-2019-7637/ self
https://www.suse.com/security/cve/CVE-2019-7638/ self
https://www.suse.com/security/cve/CVE-2021-33657/ self
https://www.suse.com/security/cve/CVE-2019-13616 external
https://bugzilla.suse.com/1141844 external
https://www.suse.com/security/cve/CVE-2019-7572 external
https://bugzilla.suse.com/1124806 external
https://www.suse.com/security/cve/CVE-2019-7573 external
https://bugzilla.suse.com/1124805 external
https://www.suse.com/security/cve/CVE-2019-7574 external
https://bugzilla.suse.com/1124803 external
https://www.suse.com/security/cve/CVE-2019-7575 external
https://bugzilla.suse.com/1124802 external
https://www.suse.com/security/cve/CVE-2019-7577 external
https://bugzilla.suse.com/1124800 external
https://www.suse.com/security/cve/CVE-2019-7578 external
https://bugzilla.suse.com/1125099 external
https://www.suse.com/security/cve/CVE-2019-7635 external
https://bugzilla.suse.com/1124827 external
https://www.suse.com/security/cve/CVE-2019-7636 external
https://bugzilla.suse.com/1124826 external
https://www.suse.com/security/cve/CVE-2019-7637 external
https://bugzilla.suse.com/1124825 external
https://bugzilla.suse.com/1134135 external
https://www.suse.com/security/cve/CVE-2019-7638 external
https://bugzilla.suse.com/1124824 external
https://www.suse.com/security/cve/CVE-2021-33657 external
https://bugzilla.suse.com/1198001 external
https://bugzilla.suse.com/1199105 external
https://bugzilla.suse.com/1200204 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "SDL-1.2.15-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the SDL-1.2.15-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2025-15205",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15205-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-13616 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-13616/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-7572 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-7572/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-7573 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-7573/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-7574 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-7574/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-7575 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-7575/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-7577 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-7577/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-7578 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-7578/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-7635 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-7635/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-7636 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-7636/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-7637 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-7637/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-7638 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-7638/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-33657 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-33657/"
      }
    ],
    "title": "SDL-1.2.15-1.1 on GA media",
    "tracking": {
      "current_release_date": "2025-07-03T00:00:00Z",
      "generator": {
        "date": "2025-07-03T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2025:15205-1",
      "initial_release_date": "2025-07-03T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-07-03T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "SDL-1.2.15-1.1.aarch64",
                "product": {
                  "name": "SDL-1.2.15-1.1.aarch64",
                  "product_id": "SDL-1.2.15-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "SDL-1.2.15-1.1.ppc64le",
                "product": {
                  "name": "SDL-1.2.15-1.1.ppc64le",
                  "product_id": "SDL-1.2.15-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "SDL-1.2.15-1.1.s390x",
                "product": {
                  "name": "SDL-1.2.15-1.1.s390x",
                  "product_id": "SDL-1.2.15-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "SDL-1.2.15-1.1.x86_64",
                "product": {
                  "name": "SDL-1.2.15-1.1.x86_64",
                  "product_id": "SDL-1.2.15-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "SDL-1.2.15-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64"
        },
        "product_reference": "SDL-1.2.15-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "SDL-1.2.15-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le"
        },
        "product_reference": "SDL-1.2.15-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "SDL-1.2.15-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x"
        },
        "product_reference": "SDL-1.2.15-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "SDL-1.2.15-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
        },
        "product_reference": "SDL-1.2.15-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-13616",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-13616"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-13616",
          "url": "https://www.suse.com/security/cve/CVE-2019-13616"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141844 for CVE-2019-13616",
          "url": "https://bugzilla.suse.com/1141844"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-13616"
    },
    {
      "cve": "CVE-2019-7572",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-7572"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-7572",
          "url": "https://www.suse.com/security/cve/CVE-2019-7572"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1124806 for CVE-2019-7572",
          "url": "https://bugzilla.suse.com/1124806"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-7572"
    },
    {
      "cve": "CVE-2019-7573",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-7573"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the wNumCoef loop).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-7573",
          "url": "https://www.suse.com/security/cve/CVE-2019-7573"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1124805 for CVE-2019-7573",
          "url": "https://bugzilla.suse.com/1124805"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-7573"
    },
    {
      "cve": "CVE-2019-7574",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-7574"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-7574",
          "url": "https://www.suse.com/security/cve/CVE-2019-7574"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1124803 for CVE-2019-7574",
          "url": "https://bugzilla.suse.com/1124803"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-7574"
    },
    {
      "cve": "CVE-2019-7575",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-7575"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-7575",
          "url": "https://www.suse.com/security/cve/CVE-2019-7575"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1124802 for CVE-2019-7575",
          "url": "https://bugzilla.suse.com/1124802"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-7575"
    },
    {
      "cve": "CVE-2019-7577",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-7577"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-7577",
          "url": "https://www.suse.com/security/cve/CVE-2019-7577"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1124800 for CVE-2019-7577",
          "url": "https://bugzilla.suse.com/1124800"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-7577"
    },
    {
      "cve": "CVE-2019-7578",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-7578"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-7578",
          "url": "https://www.suse.com/security/cve/CVE-2019-7578"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1125099 for CVE-2019-7578",
          "url": "https://bugzilla.suse.com/1125099"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-7578"
    },
    {
      "cve": "CVE-2019-7635",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-7635"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-7635",
          "url": "https://www.suse.com/security/cve/CVE-2019-7635"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1124827 for CVE-2019-7635",
          "url": "https://bugzilla.suse.com/1124827"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-7635"
    },
    {
      "cve": "CVE-2019-7636",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-7636"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-7636",
          "url": "https://www.suse.com/security/cve/CVE-2019-7636"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1124826 for CVE-2019-7636",
          "url": "https://bugzilla.suse.com/1124826"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-7636"
    },
    {
      "cve": "CVE-2019-7637",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-7637"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-7637",
          "url": "https://www.suse.com/security/cve/CVE-2019-7637"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1124825 for CVE-2019-7637",
          "url": "https://bugzilla.suse.com/1124825"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1134135 for CVE-2019-7637",
          "url": "https://bugzilla.suse.com/1134135"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-7637"
    },
    {
      "cve": "CVE-2019-7638",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-7638"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-7638",
          "url": "https://www.suse.com/security/cve/CVE-2019-7638"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1124824 for CVE-2019-7638",
          "url": "https://bugzilla.suse.com/1124824"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-7638"
    },
    {
      "cve": "CVE-2021-33657",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-33657"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
          "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-33657",
          "url": "https://www.suse.com/security/cve/CVE-2021-33657"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1198001 for CVE-2021-33657",
          "url": "https://bugzilla.suse.com/1198001"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199105 for CVE-2021-33657",
          "url": "https://bugzilla.suse.com/1199105"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200204 for CVE-2021-33657",
          "url": "https://bugzilla.suse.com/1200204"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.aarch64",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.ppc64le",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.s390x",
            "openSUSE Tumbleweed:SDL-1.2.15-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-03T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-33657"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.