CVE-2019-13626

SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in Fill_IMA_ADPCM_block, caused by an integer overflow in IMA_ADPCM_decode() in audio/SDL_wave.c.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

1.80% chance of exploitation in the next 30 days, 77th percentile

Published

2019-07-17

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://bugzilla.libsdl.org/show_bug.cgi?id=4522

References

• CVE Record
• NVD entry

Related

• CVE-2019-13625
• CVE-2019-13633
• CVE-2019-13623
• CVE-2019-1364
• CVE-2019-13617
• CVE-2019-13643