SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in Blit1to4 in video/SDLblit1.c.
{ "binaries": [ { "binary_name": "libsdl2-image-2.0-0", "binary_version": "2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1" }, { "binary_name": "libsdl2-image-dev", "binary_version": "2.0.0+dfsg-3+deb8u2build0.14.04.1~esm1" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "libsdl-image1.2", "binary_version": "1.2.12-5+deb9u1ubuntu0.14.04.1~esm1" }, { "binary_name": "libsdl-image1.2-dev", "binary_version": "1.2.12-5+deb9u1ubuntu0.14.04.1~esm1" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }