Code injection

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memset-vec-unaligned-erms.S...

CVE-2022-35114

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via extractFrame at /readers/swf.c...

CVE-2022-35114

CVE-2022-35114 affects SWFTools; a segmentation violation is triggered by extractFrame in /readers/swf.c. The issue is in SWFTools’ SWF handling, with exploitation characteristics per CVSS: local attack vector, user interaction required, low attack complexity, and availability impact high (base s...

CVE-2022-35113

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via swfDefineLosslessBitsTagToImage at /modules/swfbits.c...

CVE-2022-35113

SWFTools (commit 772e55a2) contains a heap-buffer overflow in swf_DefineLosslessBitsTagToImage (modules/swfbits.c). The CVE-2022-35113 entry and Red Hat/Ubuntu/Nessus-like sources confirm this vulnerability affects SWFTools; CVSSv3 base 5.5 (MEDIUM) with LOCAL attack vector and user interaction r...

CVE-2022-35111

SWFTools (commit 772e55a2) ontains a stack overflow in sanitizer_stackdepot.cpp: __sanitizer::StackDepotNode::hash(__sanitizer::StackTrace const&). The CVE-2022-35111 entry reflects a stack overflow vulnerability in SWFTools, with exploitation described as LOCAL vector, HIGH availability impact ...

CVE-2022-35111

SWFTools commit 772e55a2 was discovered to contain a stack overflow via sanitizer::StackDepotNode::hashsanitizer::StackTrace const& at /sanitizercommon/sanitizerstackdepot.cpp...

CVE-2022-35110

SWFTools contains a memory leak in /lib/mem.c caused by commit 772e55a2. CVSS v3.1 vector: AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H with base score 5.5 (Medium). The provided connected documents do not include a vendor patch or remediation details; some entries note unpatched status but no fix is list...

CVE-2022-35110

SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c...

CVE-2022-35109

SWFTools contains a heap-buffer overflow in draw_stroke implemented in /gfxpoly/stroke.c (commit 772e55a2). Affected component: SWFTools; root cause: heap-buffer overflow in drawing strokes. CVSSv3.1 base score 5.5 (Medium) with LOCAL attack vector, user interaction required, and high impact on a...

CVE-2022-35109

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via drawstroke at /gfxpoly/stroke.c...

CVE-2022-35108

CVE-2022-35108 concerns SWFTools, where a segmentation fault was reported in DCTStream::getChar() within /xpdf/Stream.cc. The core vulnerability is triggered by this function in SWFTools, as documented across multiple sources (e.g., NVD/NVB, Red Hat, Ubuntu, OSV, Nessus plugin, and related adviso...

CVE-2022-35108

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc...

CVE-2022-35107

SWFTools commit 772e55a2 was discovered to contain a stack overflow via vfprintf at /stdio-common/vfprintf.c...

CVE-2022-35107

SWFTools contains a stack overflow in vfprintf (via /stdio-common/vfprintf.c) tied to commit 772e55a2, mapped to CVE-2022-35107. The CVE is described with local attack vector, user interaction required, and high availability impact (CVSS 3.1 base score 5.5). No patched version or remediation deta...

CVE-2022-35106

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::computeTableChecksumunsigned char, int at /xpdf/FoFiTrueType.cc...

CVE-2022-35106

SWFTools (the SWFTools utilities) contains a vulnerability in FoFiTrueType::computeTableChecksum(unsigned char*, int) that causes a segmentation fault in xpdf/FoFiTrueType.cc. The CVE-2022-35106 entry notes the issue is triggered within SWFTools commit 772e55a2, with a CVSS v3.1 vector indicating...

CVE-2022-35105

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via /bin/png2swf+0x552cea...

CVE-2022-35105

SWFTools is affected by a heap-buffer overflow in the /bin/png2swf API (/bin/png2swf+0x552cea) associated with CVE-2022-35105 (commit 772e55a2). The issue is described as a heap-buffer overflow in SWFTools, with CVSSv3.1 metrics indicating Local Access Vector, Low Attack Complexity, No privileges...

CVE-2022-35104

CVE-2022-35104 concerns SWFTools with a heap-buffer overflow in DCTStream::reset() located in /xpdf/Stream.cc, triggered by commit 772e55a2. The vulnerability is documented across multiple feeds (e.g., Red Hat, Ubuntu, NVD, OSV) and corresponds to a local attack vector with medium overall CVSS v3...