An issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There is an invalid free error in the SDL function SDL_SetError_REAL at SDL_error.c.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sdl2_image | Libsdl | 2.0.4 (including) | 2.0.4 (including) |
| Simple_directmedia_layer | Libsdl | 2.0.9 (including) | 2.0.9 (including) |
| Libsdl2-image | Ubuntu | bionic | * |
| Libsdl2-image | Ubuntu | disco | * |
| Libsdl2-image | Ubuntu | esm-apps/bionic | * |
| Libsdl2-image | Ubuntu | esm-apps/xenial | * |
| Libsdl2-image | Ubuntu | trusty | * |
| Libsdl2-image | Ubuntu | trusty/esm | * |
| Libsdl2-image | Ubuntu | upstream | * |
| Libsdl2-image | Ubuntu | xenial | * |
| Sdl-image1.2 | Ubuntu | bionic | * |
| Sdl-image1.2 | Ubuntu | disco | * |
| Sdl-image1.2 | Ubuntu | trusty | * |
| Sdl-image1.2 | Ubuntu | trusty/esm | * |
| Sdl-image1.2 | Ubuntu | upstream | * |
| Sdl-image1.2 | Ubuntu | xenial | * |