Vulnerabilities (CVE)

Filtered by vendor Swftools Subscribe
Total 123 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-22920 1 Swftools 1 Swftools 2024-11-21 N/A 7.8 HIGH
swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c.
CVE-2024-22919 1 Swftools 1 Swftools 2024-11-21 N/A 7.8 HIGH
swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587.
CVE-2024-22915 1 Swftools 1 Swftools 2024-11-21 N/A 7.8 HIGH
A heap-use-after-free was found in SWFTools v0.9.2, in the function swf_DeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution.
CVE-2024-22914 1 Swftools 1 Swftools 2024-11-21 N/A 5.5 MEDIUM
A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It allows an attacker to cause denial of service.
CVE-2024-22913 1 Swftools 1 Swftools 2024-11-21 N/A 7.8 HIGH
A heap-buffer-overflow was found in SWFTools v0.9.2, in the function swf5lex at lex.swf5.c:1321. It allows an attacker to cause code execution.
CVE-2024-22912 1 Swftools 1 Swftools 2024-11-21 N/A 7.8 HIGH
A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause code execution.
CVE-2024-22911 1 Swftools 1 Swftools 2024-11-21 N/A 7.8 HIGH
A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602.
CVE-2024-22562 1 Swftools 1 Swftools 2024-11-21 N/A 7.8 HIGH
swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dict_foreach_keyvalue at swftools/lib/q.c.
CVE-2023-37644 1 Swftools 1 Swftools 2024-11-21 N/A 5.5 MEDIUM
SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in png_read_chunk in lib/png.c.
CVE-2022-40009 1 Swftools 1 Swftools 2024-11-21 N/A 9.8 CRITICAL
SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function grow_unicode at /lib/ttf.c.
CVE-2022-40008 1 Swftools 1 Swftools 2024-11-21 N/A 9.8 CRITICAL
SWFTools commit 772e55a was discovered to contain a heap-buffer overflow via the function readU8 at /lib/ttf.c.
CVE-2022-35114 1 Swftools 1 Swftools 2024-11-21 N/A 5.5 MEDIUM
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via extractFrame at /readers/swf.c.
CVE-2022-35113 1 Swftools 1 Swftools 2024-11-21 N/A 5.5 MEDIUM
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via swf_DefineLosslessBitsTagToImage at /modules/swfbits.c.
CVE-2022-35111 1 Swftools 1 Swftools 2024-11-21 N/A 5.5 MEDIUM
SWFTools commit 772e55a2 was discovered to contain a stack overflow via __sanitizer::StackDepotNode::hash(__sanitizer::StackTrace const&) at /sanitizer_common/sanitizer_stackdepot.cpp.
CVE-2022-35110 1 Swftools 1 Swftools 2024-11-21 N/A 5.5 MEDIUM
SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c.
CVE-2022-35109 1 Swftools 1 Swftools 2024-11-21 N/A 5.5 MEDIUM
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw_stroke at /gfxpoly/stroke.c.
CVE-2022-35108 1 Swftools 1 Swftools 2024-11-21 N/A 5.5 MEDIUM
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc.
CVE-2022-35107 1 Swftools 1 Swftools 2024-11-21 N/A 5.5 MEDIUM
SWFTools commit 772e55a2 was discovered to contain a stack overflow via vfprintf at /stdio-common/vfprintf.c.
CVE-2022-35106 1 Swftools 1 Swftools 2024-11-21 N/A 5.5 MEDIUM
SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::computeTableChecksum(unsigned char*, int) at /xpdf/FoFiTrueType.cc.
CVE-2022-35105 1 Swftools 1 Swftools 2024-11-21 N/A 5.5 MEDIUM
SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via /bin/png2swf+0x552cea.