CVE-2021-39558

CVE-2021-39558 affects swftools (through 20200710). A stack-buffer-overflow occurs in VectorGraphicOutputDev::drawGeneralImage() in VectorGraphicOutputDev.cc, allowing an attacker to cause code execution. Official references describe the vulnerability and classify impact with CVSS metrics (base s...

CVE-2021-39594

The CVE-2021-39594 issue is in swftools up to 20200710, with a NULL pointer dereference in updateusage() in swftext.c that allows a denial of service.

CVE-2021-39558

An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function VectorGraphicOutputDev::drawGeneralImage located in VectorGraphicOutputDev.cc. It allows an attacker to cause code Execution...

CVE-2021-39594

Removed by vendor...

CVE-2021-39558

Removed by vendor...

CVE-2021-39587

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfDumpABC located in abc.c. It allows an attacker to cause Denial of Service...

CVE-2021-39587

The CVE-2021-39587 issue affects swftools (up to 20200710). A NULL pointer dereference in swf_DumpABC() (abc.c) can lead to Denial of Service. The connected sources (e.g., NVD entry, Red Hat/CNVD/Ubuntu OSV, Debian tracker) confirm the vulnerability and its impact but do not provide any patch/ver...

CVE-2021-39587

Removed by vendor...

CVE-2021-39563

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swfDumpActions located in swfaction.c. It allows an attacker to cause Denial of Service...

CVE-2021-39563

CVE-2021-39563 affects swftools (through 2020-07-10). The vulnerability is a NULL pointer dereference in the function swf_DumpActions() in swfaction.c, which can be exploited to cause a Denial of Service. The connected documents confirm the impact as DoS but do not provide remediation steps or pa...

CVE-2021-39579

CVE-2021-39579 : The vulnerability is in swftools (through 20200710) where a heap-buffer-overflow in function string_hash() (q.c) can lead to code execution. Multiple connected reports corroborate the flaw across diverse vendors and advisories (NVD, Red Hat, CNVD, OSV, CNVD, etc.). The provided d...

CVE-2021-39579

An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function stringhash located in q.c. It allows an attacker to cause code Execution...

CVE-2021-39563

Removed by vendor...

CVE-2021-39579

Removed by vendor...

CVE-2021-39592

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function poollookupuint located in pool.c. It allows an attacker to cause Denial of Service...

CVE-2021-39589

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function parsemetadata located in abc.c. It allows an attacker to cause Denial of Service...

CVE-2021-39592

Removed by vendor...

CVE-2021-39574

Removed by vendor...

CVE-2021-39592

SWFTools (through 20200710) contains a NULL pointer dereference in pool_lookup_uint() in pool.c, leading to Denial of Service. This vulnerability is documented across multiple sources (CVE-2021-39592). Affected software is swftools; the underlying issue is a NULL pointer dereference in pool_looku...

CVE-2021-39589

CVE-2021-39589 affects swftools (through 20200710); a NULL pointer dereference in parse_metadata() in abc.c allows a Denial of Service. Root cause: NULL pointer dereference within metadata parsing. Impact: DoS as described in multiple sources. Exploitation details are not provided in the connecte...