{"id":"CVE-2022-27470","details":"SDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function TTF_RenderText_Solid(). This vulnerability is triggered via a crafted TTF file.","modified":"2026-08-12T13:00:42.561435Z","published":"2022-05-04T02:34:44Z","related":["openSUSE-SU-2024:12177-1"],"database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27470.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27470.json"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAGMQMRQDTZFQW64JEW3O6HY3JYLAAHT/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RXI3MDPR24W5557G34YHWOP2MOK6BTGB/"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XPYTEBBNHCDGPVFACC5RC5K2FZUCYTPZ/"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27470"},{"type":"REPORT","url":"https://github.com/libsdl-org/SDL_ttf/issues/187"},{"type":"FIX","url":"https://github.com/libsdl-org/SDL_ttf/commit/db1b41ab8bde6723c24b866e466cad78c2fa0448"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libsdl-org/sdl_ttf","events":[{"introduced":"0"},{"fixed":"db1b41ab8bde6723c24b866e466cad78c2fa0448"}],"database_specific":{"cpe":"cpe:2.3:a:libsdl:sdl_ttf:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"2.0.18"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["release-2.0.18","release-2.0.15","release-2.0.14","release-2.0.13","release-2.0.12","release-2.0.11","Last_LGPL_revision","release-2.0.10","release-2.0.9","release-2.0.8"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-27470.json","vanir_signatures_modified":"2026-08-12T13:00:42Z","vanir_signatures":[{"target":{"file":"SDL_ttf.c","function":"Create_Surface_Blended"},"deprecated":false,"digest":{"function_hash":"137396571173358460168307247144123650420","length":1018},"id":"CVE-2022-27470-256dc5b1","signature_type":"Function","signature_version":"v1","source":"https://github.com/libsdl-org/sdl_ttf/commit/db1b41ab8bde6723c24b866e466cad78c2fa0448"},{"digest":{"function_hash":"130009402887661684762311681368155425169","length":1848},"id":"CVE-2022-27470-669b07da","signature_type":"Function","signature_version":"v1","source":"https://github.com/libsdl-org/sdl_ttf/commit/db1b41ab8bde6723c24b866e466cad78c2fa0448","target":{"file":"SDL_ttf.c","function":"Create_Surface_Shaded"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["270510694538921350392121102530163546239","124122267798574511640084568586616589552","286458684089463468338458938889385322942","150679597858678513831754182126436406233","142266846761783483939639097313637824327","180409813062706396087937398028464459544","286458684089463468338458938889385322942","150679597858678513831754182126436406233","83381688109695189361718463534996348629","160948163142671191374137794067733679829","217842000718041149224293011725540218397","116259183769259541956858137261490443221"],"threshold":0.9},"id":"CVE-2022-27470-db00c63a","signature_type":"Line","signature_version":"v1","source":"https://github.com/libsdl-org/sdl_ttf/commit/db1b41ab8bde6723c24b866e466cad78c2fa0448","target":{"file":"SDL_ttf.c"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/libsdl-org/sdl_ttf/commit/db1b41ab8bde6723c24b866e466cad78c2fa0448","target":{"file":"SDL_ttf.c","function":"Create_Surface_Solid"},"deprecated":false,"digest":{"function_hash":"335978653677243205703509191001628725270","length":1149},"id":"CVE-2022-27470-ef340056"}]}}],"schema_version":"1.9.0"}