CVE-2022-4743: 
CBL Mariner vulnerability analysis and mitigation

A memory leak vulnerability (CVE-2022-4743) was discovered in SDL2 (Simple DirectMedia Layer) affecting versions 2.0.4 and above, while SDL-1.x versions are not affected. The vulnerability was identified in the GLESCreateTexture() function within SDLrender_gles.c (NVD, Gentoo Security).

The vulnerability stems from a potential memory leak in the GLESCreateTexture() function located in SDLrender_gles.c. The issue occurs when the function fails to properly free allocated memory in error paths, specifically when dealing with streaming texture access. The vulnerability has been assigned a CVSS score of 7.5, indicating a high severity level (Rapid7, GitHub PR).

When exploited, this vulnerability allows an attacker to cause a denial of service attack through memory resource exhaustion. The impact is particularly significant for applications that use SDL2 for rendering operations (NVD).

The vulnerability has been fixed in SDL2 version 2.26.0. Users are advised to upgrade to this version or later. The fix involves properly freeing allocated memory in error paths within the GLES_CreateTexture function (Gentoo Security, GitHub Commit).