← Vulnerability feed

Vulnerability record · CVE-2022-34568 · published 28 July 2022

CVE-2022-34568: Libsdl simple directmedia layer use after free vulnerability

Libsdl · Simple Directmedia Layer

SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.

7.5 CVSS 3.1 High EPSS 1.1% · top 36.1% CWE-416 · Use after free
7.5CVSS 3.1 base score
1.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

SDL v1.2 was discovered to contain a use-after-free via the XFree function at /src/video/x11/SDL_x11yuv.c.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/libsdl-org/SDL-1.2/issues/863 ExploitIssue TrackingPatchThird Party Advisory
https://security.gentoo.org/glsa/202305-17
https://github.com/libsdl-org/SDL-1.2/issues/863 ExploitIssue TrackingPatchThird Party Advisory
https://security.gentoo.org/glsa/202305-17

Track CVE-2022-34568 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2019-14906Libsdl simple directmedia layer out-of-bounds read vulnerabilityA flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue only affects Red Hat SDL pack…EPSS 1.8%8.8CVE-2021-33657Libsdl simple directmedia layer out-of-bounds write vulnerabilityThere is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, a…EPSS 2.1%8.8CVE-2019-12219Libsdl sdl2 image double free vulnerabilityAn issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in conjunction with libSDL2_image.a in SDL2_image 2.0.4. There…EPSS 2.0%8.8CVE-2019-7637Libsdl simple directmedia layer out-of-bounds write vulnerabilitySDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c.EPSS 3.1%8.8CVE-2019-7638Libsdl simple directmedia layer out-of-bounds read vulnerabilitySDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Map1toN in video/SDL_pixels.c.EPSS 2.9%8.8CVE-2019-7572Libsdl simple directmedia layer out-of-bounds read vulnerabilitySDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.EPSS 2.8%8.8CVE-2019-7573Libsdl simple directmedia layer out-of-bounds read vulnerabilitySDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (inside the…EPSS 3.0%8.8CVE-2019-7574Libsdl simple directmedia layer out-of-bounds read vulnerabilitySDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c.EPSS 2.8%

Source: NIST National Vulnerability Database (record CVE-2022-34568), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.