VDB

ALPINE-CVE-2019-13616

ALPINE-CVE-2019-13616 PUBLISHED CVSS 8.100000381469727 HIGH

SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c when called from SDL_SoftBlit in video/SDL_blit.c.

Risk Scores

CVSS 3.1
8.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.10sdl1.2.13-r1, 1.2.13-r0, 1.2.15-r9
Alpine:v3.11sdl_image1.2.12-r0, 1.2.12-r4, 1.2.12-r3
Alpine:v3.9sdl_image1.2.10-r1, 1.2.12-r1, 1.2.12-r1
Alpine:v3.11sdl1.2.13-r0, 0, 1.2.15-r1
Alpine:v3.9sdl1.2.14-r1, 0, 1.2.13-r1
Alpine:v3.7sdl0, 1.2.14-r0, 1.2.15-r3
Alpine:v3.12sdl1.2.15-r3, 1.2.15-r2, 1.2.15-r11
Alpine:v3.8sdl_image1.2.12-r3, 1.2.10-r0, 1.2.10-r1
Alpine:v3.8sdl1.2.14-r4, 1.2.14-r3, 1.2.14-r2
Alpine:v3.11sdl2_image2.0.1-r0, 2.0.3-r0, 0
Alpine:v3.7sdl_image1.2.12-r0, 1.2.10-r1, 1.2.10-r2
Alpine:v3.10sdl_image1.2.10-r0, 1.2.10-r1, 1.2.10-r2

Timeline

  • Jul 16, 2019 CVE Published
  • Nov 19, 2025 CVE Updated
  • Apr 30, 2026 Distribution Patch
Open in Interactive Console →
$ Console Community · 100/wk Open console ›