Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: libsdl-org Clear all filters
TI-2026-85474 CVE-2026-122329 · GHSA-782g-354j-4465

Stack-based buffer overflow in SDL_mixer AIFF decoder

Priority LOW 36

SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src/decoder_aiff.c due to miscalculated output offsets when expanding A-law or mu-law samples.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.0016 Published 2026-11-05 No fix listed CWE-121
TI-2026-85473 CVE-2026-122328 · GHSA-7qqc-5rvj-wqqw

Stack-based buffer overflow in SDL_mixer WAV decoder

Priority LOW 36

SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw() of src/decoder_wav.c when decoding A-law or mu-law WAV files.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.0016 Published 2026-11-05 No fix listed CWE-121
TI-2026-81161 CVE-2026-117557 · GHSA-m3v7-j67w-q2pr

Stack out-of-bounds read in SDL_image ILBM loader

Priority MEDIUM 64

SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM mode is set.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00129 Published 2026-10-27 No fix listed CWE-125