CVE-2022-40008

SWFTools commit 772e55a was discovered to contain a heap-buffer overflow via the function readU8 at /lib/ttf.c...

CVE-2022-40008

CVE-2022-40008 affects SWFTools; the issue is a heap-buffer overflow in readU8 implemented in /lib/ttf.c, tied to commit 772e55a. The entry lists a CVSS v3.1 base score of 9.8 (CRITICAL), with network attack vector, no privileges required, no user interaction, and impact to confidentiality, integ...