CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| MEDIUM4.3 |
swftools v0.9.2 was discovered to contain a segmentation violation via the function s_font at swftools/src/swfc.c. |
| 05/03/2024 |
| CVE-2024-26335 | MEDIUM5.5 | swftools v0.9.2 was discovered to contain a segmentation violation via the function state_free at swftools/src/swfc-history.c. | 05/03/2024 |
| CVE-2024-26334 | MEDIUM6.2 | swftools v0.9.2 was discovered to contain a segmentation violation via the function compileSWFActionCode at swftools/lib/action/actioncompiler.c. | 05/03/2024 |
| CVE-2024-26333 | MEDIUM5.5 | swftools v0.9.2 was discovered to contain a segmentation violation via the function free_lines at swftools/lib/modules/swfshape.c. | 05/03/2024 |
| CVE-2024-25165 | HIGH7.8 | A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex. | 14/02/2024 |
| CVE-2024-22957 | MEDIUM5.5 | swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dict_do_lookup in swftools/lib/q.c:1190. | 19/01/2024 |
| CVE-2024-22956 | HIGH7.8 | swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838 | 19/01/2024 |
| CVE-2024-22955 | HIGH7.8 | swftools 0.9.2 was discovered to contain a stack-buffer-underflow vulnerability via the function parseExpression at swftools/src/swfc.c:2576. | 19/01/2024 |
| CVE-2024-22919 | HIGH7.8 | swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587. | 19/01/2024 |
| CVE-2024-22915 | HIGH7.8 | A heap-use-after-free was found in SWFTools v0.9.2, in the function swf_DeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution. | 19/01/2024 |
| CVE-2024-22914 | MEDIUM5.5 | A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It allows an attacker to cause denial of service. | 19/01/2024 |
| CVE-2024-22913 | HIGH7.8 | A heap-buffer-overflow was found in SWFTools v0.9.2, in the function swf5lex at lex.swf5.c:1321. It allows an attacker to cause code execution. | 19/01/2024 |
| CVE-2024-22912 | HIGH7.8 | A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause code execution. | 19/01/2024 |
| CVE-2024-22911 | HIGH7.8 | A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602. | 19/01/2024 |
| CVE-2024-22920 | HIGH7.8 | swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c. | 19/01/2024 |
| CVE-2024-22562 | HIGH7.8 | swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dict_foreach_keyvalue at swftools/lib/q.c. | 19/01/2024 |
| CVE-2023-37644 | MEDIUM5.5 | SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in png_read_chunk in lib/png.c. | 11/01/2024 |