Libsdl-org vulnerabilities
We track 2 vulnerabilities in Libsdl-org products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Libsdl-org vulnerabilities
- 7.8 High severity
SDL_mixer: Stack-based Buffer Overflow
SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src/decoder_aiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. Attackers can supply a crafted AIFF-C file that overwrites roughly 1 KB of adj
- 7.8 High severity
SDL_mixer: Stack-based Buffer Overflow
SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw() of src/decoder_wav.c when decoding A-law or mu-law WAV files. Attackers can supply a crafted WAV file whose doubly-offset float expansion overwrites about 1 KB of