SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in FillIMAADPCMblock, caused by an integer overflow in IMAADPCMdecode() in audio/SDLwave.c.
{ "binaries": [ { "binary_name": "libsdl2-2.0-0", "binary_version": "2.0.2+dfsg1-3ubuntu1.3+esm1" }, { "binary_name": "libsdl2-dev", "binary_version": "2.0.2+dfsg1-3ubuntu1.3+esm1" } ] }
{ "binaries": [ { "binary_name": "libsdl2-2.0-0", "binary_version": "2.0.4+dfsg1-2ubuntu2.16.04.2" }, { "binary_name": "libsdl2-dev", "binary_version": "2.0.4+dfsg1-2ubuntu2.16.04.2" } ] }
{ "binaries": [ { "binary_name": "libsdl2-2.0-0", "binary_version": "2.0.8+dfsg1-1ubuntu1.18.04.4+esm1" }, { "binary_name": "libsdl2-dev", "binary_version": "2.0.8+dfsg1-1ubuntu1.18.04.4+esm1" } ] }