Swftools vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2024-28458 Null Pointer Dereference vulnerability in swfdump in swftools 0.9.2 allows attackers to crash the appliation via the function compileSWFActionCode in action/actHigh 7.5 · Apr 11, 2024
• CVE-2024-25165 A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex.High 7.8 · Feb 14, 2024
• CVE-2024-22956 swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838High 7.8 · Jan 19, 2024
• CVE-2024-22955 swftools 0.9.2 was discovered to contain a stack-buffer-underflow vulnerability via the function parseExpression at swftools/src/swfc.c:2576.High 7.8 · Jan 19, 2024
• CVE-2024-22919 swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587.High 7.8 · Jan 19, 2024
• CVE-2024-22915 A heap-use-after-free was found in SWFTools v0.9.2, in the function swf_DeleteTag at rfxswf.c:1193.High 7.8 · Jan 19, 2024
• CVE-2024-22913 A heap-buffer-overflow was found in SWFTools v0.9.2, in the function swf5lex at lex.swf5.c:1321.High 7.8 · Jan 19, 2024
• CVE-2024-22912 A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327.High 7.8 · Jan 19, 2024
• CVE-2024-22911 A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602.High 7.8 · Jan 19, 2024
• CVE-2024-22920 swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c.High 7.8 · Jan 19, 2024
• CVE-2024-22562 swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dict_foreach_keyvalue at swftools/lib/q.c.High 7.8 · Jan 19, 2024
• CVE-2023-26991 SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swf_ReadSWF2 function in lib/rfxswf.c.High 7.8 · Apr 4, 2023
• CVE-2022-40009 SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function grow_unicode at /lib/ttf.c.Critical 9.8 · Sep 20, 2022
• CVE-2022-40008 SWFTools commit 772e55a was discovered to contain a heap-buffer overflow via the function readU8 at /lib/ttf.c.Critical 9.8 · Sep 20, 2022
• CVE-2021-42204 An issue was discovered in swftools through 20201222.High 7.8 · Jun 2, 2022
• CVE-2021-42203 An issue was discovered in swftools through 20201222.High 7.8 · Jun 2, 2022
• CVE-2021-42201 An issue was discovered in swftools through 20201222.High 7.8 · Jun 2, 2022
• CVE-2021-42199 An issue was discovered in swftools through 20201222.High 7.8 · Jun 2, 2022
• CVE-2021-42197 An issue was discovered in swftools through 20201222 through a memory leak in the swftools when swfdump is used.High 7.8 · Jun 2, 2022
• CVE-2021-42195 An issue was discovered in swftools through 20201222.High 7.8 · Jun 2, 2022
• CVE-2021-39595 An issue was discovered in swftools through 20200710.High 7.8 · Sep 20, 2021
• CVE-2021-39582 An issue was discovered in swftools through 20200710.High 7.8 · Sep 20, 2021
• CVE-2021-39579 An issue was discovered in swftools through 20200710.High 7.8 · Sep 20, 2021
• CVE-2021-39577 An issue was discovered in swftools through 20200710.High 7.8 · Sep 20, 2021
• CVE-2021-39574 An issue was discovered in swftools through 20200710.High 7.8 · Sep 20, 2021