Buffer overflow

SWFTools commit 772e55a2 was discovered to contain a global buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc...

Heap overflow

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::readHuffSymDCTHuffTable at /xpdf/Stream.cc...

UBUNTU-CVE-2022-35097

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::writeTTF at /xpdf/FoFiTrueType.cc...

UBUNTU-CVE-2022-35094

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::readHuffSymDCTHuffTable at /xpdf/Stream.cc...

UBUNTU-CVE-2022-35092

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via convertgfxline at /gfxpoly/convert.c...

UBUNTU-CVE-2022-35096

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via drawstroke at /gfxpoly/stroke.c...

UBUNTU-CVE-2022-35099

SWFTools commit 772e55a2 was discovered to contain a stack overflow via ImageStream::getPixelunsigned char at /xpdf/Stream.cc...

Code injection

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via InfoOutputDev::type3D1 at /pdf/InfoOutputDev.cc...

UBUNTU-CVE-2022-35093

SWFTools commit 772e55a2 was discovered to contain a global buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc...

CVE-2022-35099

SWFTools commit 772e55a2 was discovered to contain a stack overflow via ImageStream::getPixelunsigned char at /xpdf/Stream.cc...

CVE-2022-35099

SWFTools commit 772e55a2 was discovered to contain a stack overflow via ImageStream::getPixelunsigned char at /xpdf/Stream.cc...

CVE-2022-35099

SWFTools vulnerability CVE-2022-35099 affects the SWFTools package, with the stack overflow occurring in ImageStream::getPixel(unsigned char*) implemented in /xpdf/Stream.cc. The issue is tied to commit 772e55a2 (SWFTools version 772e55a2) and is reported as a stack overflow that could impact ava...

CVE-2022-35098

CVE-2022-35098 affects SWFTools via commit 772e55a2, causing a heap-buffer overflow in the function GfxICCBasedColorSpace::getDefaultColor(GfxColor*) located in /xpdf/GfxState.cc. The CVSS v3.1 base metrics in the records show: AV Local, PR None, UI Required, with A (availability) impact as High ...

CVE-2022-35098

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via GfxICCBasedColorSpace::getDefaultColorGfxColor at /xpdf/GfxState.cc...

CVE-2022-35098

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via GfxICCBasedColorSpace::getDefaultColorGfxColor at /xpdf/GfxState.cc...

CVE-2022-35097

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::writeTTF at /xpdf/FoFiTrueType.cc...

CVE-2022-35097

CVE-2022-35097 affects SWFTools and is due to a segmentation violation in FoFiTrueType::writeTTF (file /xpdf/FoFiTrueType.cc). The impact described in sources aligns with a local exploit vector and a availability impact, with CVSSv3.1 vector AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (base 5.5, MEDIUM)....

CVE-2022-35097

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::writeTTF at /xpdf/FoFiTrueType.cc...

CVE-2022-35096

SWFTools (the affected software) contains a heap-buffer overflow in the draw_stroke path of /gfxpoly/stroke.c (CVE-2022-35096). The issue is documented across multiple sources (NVD, Red Hat, CVE lists, OSV), all describing a heap-buffer overflow via draw_stroke. The CVSS3.1 score is 5.5 (Medium),...

CVE-2022-35096

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via drawstroke at /gfxpoly/stroke.c...