vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2022-4743

HIGH
7.5
CVSS Score
Published: January 12, 2023 at 12:00 AM UTC
Updated: June 17, 2026 at 05:21 AM UTC
3 products affected across 2 vendorsEnterprise LinuxSimple Directmedia LayerSDL

Using SDL2 by N/A?

Get instant alerts when new vulnerabilities affect SDL2 - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.5
Exploit prediction
EPSS 1%
SSVC
No known exploit

Description

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Simple Directmedia Layer· Libsdl
95%
2.0.4 ≤ v < 2.26.0
Affected range stops below 2.26.0, so it looks safe — our inference, not a vendor statement
Enterprise Linux· Red Hatrpm
95%
9.0
SDL· Red Hat
60%
v ≥ 2.0.4

References (7)

Third Party Advisory
Source: [email protected]
https://access.redhat.com/security/cve/CVE-2022-4743
Issue TrackingPatchThird Party Advisory
Source: [email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=2156290
PatchThird Party Advisory
Source: [email protected]
https://github.com/libsdl-org/SDL/commit/00b67f55727bc0944c3266e2b875440da132ce4b
PatchThird Party Advisory
Source: [email protected]
https://github.com/libsdl-org/SDL/pull/6269
Mailing List
Source: [email protected]
https://lists.debian.org/debian-lts-announce/2023/02/msg00008.html
Vendor Advisory
Source: [email protected]
https://security.gentoo.org/glsa/202305-18
Source: af854a3a-2127-422b-91ae-364da2661108
https://lists.debian.org/debian-lts-announce/2025/11/msg00024.html

SSVC — Action Prioritization

SSVCNo known exploitAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.5HIGHCISA-ADP
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-401

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card