SDL (Simple DirectMedia Layer) 2.x through 2.0.9 has a heap-based buffer over-read in FillIMAADPCMblock, caused by an integer overflow in IMAADPCMdecode() in audio/SDLwave.c.
{ "binaries": [ { "binary_version": "2.0.2+dfsg1-3ubuntu1.3+esm1", "binary_name": "libsdl2-2.0-0" }, { "binary_version": "2.0.2+dfsg1-3ubuntu1.3+esm1", "binary_name": "libsdl2-dev" } ] }
{ "binaries": [ { "binary_version": "2.0.4+dfsg1-2ubuntu2.16.04.2", "binary_name": "libsdl2-2.0-0" }, { "binary_version": "2.0.4+dfsg1-2ubuntu2.16.04.2", "binary_name": "libsdl2-dev" } ] }
{ "binaries": [ { "binary_version": "2.0.8+dfsg1-1ubuntu1.18.04.4+esm1", "binary_name": "libsdl2-2.0-0" }, { "binary_version": "2.0.8+dfsg1-1ubuntu1.18.04.4+esm1", "binary_name": "libsdl2-dev" } ] }