{"schemaVersion":3,"id":"USN-5274-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"libsdl2 vulnerabilities\n\nIt was discovered that Simple DirectMedia Layer library incorrectly handled\nmemory when parsing certain specially crafted .BMP files. An attacker could possibly use\nthese issues to crash the application or execute arbitrary code.","dates":{"published":"2022-02-07T17:06:17.000Z","modified":"2026-04-27T19:18:08.141Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"libsdl2","name":"libsdl2","label":"libsdl2","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libsdl2","purlType":"deb","versions":[{"text":"< 2.0.8+dfsg1-1ubuntu1.18.04.4+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.0.10+dfsg1-3ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.8+dfsg1-1ubuntu1.18.04.4+esm1 | < 2.0.10+dfsg1-3ubuntu0.1~esm1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-5274-1","label":"ubuntu.com/security/notices/USN-5274-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-14409","label":"ubuntu.com/security/CVE-2020-14409","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2020-14410","label":"ubuntu.com/security/CVE-2020-14410","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2020-14409","CVE-2020-14410"],"downstream":[],"duplicates":[],"related":["CVE-2020-14409","CVE-2020-14410"]},"timeline":[{"kind":"published","date":"2022-02-07T17:06:17.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-27T19:18:08.141Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T22:20:56.000Z","stale":false,"partial":false}}