CVE-2022-4743

Name	CVE-2022-4743
Description	A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-3314-1, DLA-4382-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libsdl2 (PTS)	bookworm	2.26.5+dfsg-1	fixed
	trixie	2.32.4+dfsg-1	fixed
	forky, sid	2.32.10+dfsg-8	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
libsdl2	source	buster	2.0.9+dfsg1-1+deb10u1	DLA-3314-1
libsdl2	source	bullseye	2.0.14+dfsg2-3+deb11u2	DLA-4382-1
libsdl2	source	(unstable)	2.26.0+dfsg-1

Notes

https://bugzilla.redhat.com/show_bug.cgi?id=2156290
https://github.com/libsdl-org/SDL/pull/6269
Fixed by: https://github.com/libsdl-org/SDL/commit/00b67f55727bc0944c3266e2b875440da132ce4b (prerelease-2.25.1)