QID 671125

Simple directmedia layer (sdl) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device.
Security fix(es): a heap-based buffer overflow was discovered in sdl in the sdl_blitcopy() function, that was called while copying an existing surface into a new optimized one, due to lack of validation while loading a bmp image in the sdl_loadbmp_rw() function.
An application that uses sdl to parse untrusted input files may be vulnerable to this flaw, which could allow an attacker to make the application crash or possibly execute code.(cve-2019-13616)

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

An arbitrary attacker may exploit this vulnerability to compromise the system.