CVE-2024-22957

swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dictdolookup in swftools/lib/q.c:1190...

CVE-2024-22912

A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause code execution...

CVE-2024-22956

swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838...

CVE-2024-26334

swftools v0.9.2 was discovered to contain a segmentation violation via the function compileSWFActionCode at swftools/lib/action/actioncompiler.c...

CVE-2022-35090

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via asanmemcpy at /asan/asaninterceptorsmemintrinsics.cpp:...

CVE-2022-35098

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via GfxICCBasedColorSpace::getDefaultColorGfxColor at /xpdf/GfxState.cc...

CVE-2021-42200

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function main located in swfdump.c. It allows an attacker to cause Denial of Service...

CVE-2021-39587

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfDumpABC located in abc.c. It allows an attacker to cause Denial of Service...

CVE-2021-39584

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function namespacesethash located in pool.c. It allows an attacker to cause Denial of Service...

CVE-2021-39585

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function traitsdump located in abc.c. It allows an attacker to cause Denial of Service...

CVE-2021-39591

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfGetShapeBoundingBox located in swfshape.c. It allows an attacker to cause Denial of Service...

CVE-2021-39562

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function FileStream::makeSubStream located in Stream.cc. It allows an attacker to cause Denial of Service...

CVE-2021-39557

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function copyString located in gmem.cc. It allows an attacker to cause Denial of Service...

CVE-2021-42198

An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swfGetBits located in rfxswf.c. It allows an attacker to cause Denial of Service...

CVE-2021-39596

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function codeparse located in code.c. It allows an attacker to cause Denial of Service...

CVE-2021-39553

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function grealloc located in gmem.cc. It allows an attacker to cause Denial of Service...

CVE-2021-39595

An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function rfxalloc located in mem.c. It allows an attacker to cause code Execution...

CVE-2021-39593

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfFontExtractDefineFontInfo located in swftext.c. It allows an attacker to cause Denial of Service...

CVE-2017-16793

The wavconvert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service incorrect malloc and heap-based buffer overflow or possibly have unspecified other impact via a crafted file...

CVE-2017-10976

When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock function in lib/ttf.c...