Rashin lahani a cikin ɗakin karatu na SDL yana haifar da aiwatar da code lokacin sarrafa hotuna

A cikin saitin dakunan karatu SDL (Sauƙaƙan Layer Layer), wanda ke ba da kayan aiki don haɓaka kayan aikin 2D da 3D na kayan aikin kayan aiki, sarrafa shigarwa, sake kunna sauti, fitowar 3D ta OpenGL/OpenGL ES da sauran ayyukan da ke da alaƙa, bayyana 6 rauni. Musamman, an gano matsaloli guda biyu a cikin ɗakin karatu na SDL2_image wanda ke ba da damar tsara aiwatar da lambar nesa a cikin tsarin. Ana iya kai harin akan aikace-aikacen da ke amfani da SDL don loda hotuna.

Na biyu rauni (CVE-2019-5051, CUVE-2019-5051) yana nan a cikin aikin IMG_LoadPCX_RW kuma yana faruwa ne ta hanyar rashin ma'aikacin kuskuren da ya dace da kuma cikar lamba, wanda za'a iya amfani dashi ta hanyar wucewa na musamman na PCX fayil. Matsalolin sun rigaya shafe cikin fitowar SDL_Hoton 2.0.5. Bayani game da sauran lahani 4 zuwa yanzu ba a bayyana ba.

source: budenet.ru

Add a comment