| CVE-2023-29950 | MEDIO5.5 | swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDs_fillstyle at modules/swftools.c | 27/04/2023 |
| CVE-2023-26991 | ALTO7.8 | SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swf_ReadSWF2 function in lib/rfxswf.c. | 04/04/2023 |
| CVE-2023-27249 | MEDIO5.5 | swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swf_GetPlaceObject at swfobject.c. | 23/03/2023 |
| CVE-2022-46440 | MEDIO5.5 | ttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c. | 24/02/2023 |
| CVE-2022-35081 | MEDIO5.5 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_read_header at /src/png2swf.c. | 13/10/2022 |
| CVE-2022-35080 | MEDIO5.5 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_load at /lib/png.c. | 13/10/2022 |
| CVE-2022-35099 | MEDIO5.5 | SWFTools commit 772e55a2 was discovered to contain a stack overflow via ImageStream::getPixel(unsigned char*) at /xpdf/Stream.cc. | 23/09/2022 |
| CVE-2022-35098 | MEDIO5.5 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via GfxICCBasedColorSpace::getDefaultColor(GfxColor*) at /xpdf/GfxState.cc. | 23/09/2022 |
| CVE-2022-35097 | MEDIO5.5 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::writeTTF at /xpdf/FoFiTrueType.cc. | 23/09/2022 |
| CVE-2022-35096 | MEDIO5.5 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw_stroke at /gfxpoly/stroke.c. | 23/09/2022 |
| CVE-2022-35095 | MEDIO5.5 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via InfoOutputDev::type3D1 at /pdf/InfoOutputDev.cc. | 23/09/2022 |
| CVE-2022-35094 | MEDIO5.5 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc. | 23/09/2022 |
| CVE-2022-35093 | MEDIO5.5 | SWFTools commit 772e55a2 was discovered to contain a global buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc. | 23/09/2022 |
| CVE-2022-35092 | MEDIO5.5 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via convert_gfxline at /gfxpoly/convert.c. | 23/09/2022 |
| CVE-2022-35091 | MEDIO5.5 | SWFTools commit 772e55a2 was discovered to contain a floating point exception (FPE) via DCTStream::readMCURow() at /xpdf/Stream.cc.ow() | 23/09/2022 |
| CVE-2022-40009 | CRÍTICO9.8 | SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function grow_unicode at /lib/ttf.c. | 20/09/2022 |
| CVE-2022-40008 | CRÍTICO9.8 | SWFTools commit 772e55a was discovered to contain a heap-buffer overflow via the function readU8 at /lib/ttf.c. | 20/09/2022 |
| CVE-2021-42204 | ALTO7.8 | An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetBits() located in rfxswf.c. It allows an attacker to cause code execution. | 02/06/2022 |
| CVE-2021-42203 | ALTO7.8 | An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c. It allows an attacker to cause code execution. | 02/06/2022 |
| CVE-2021-42202 | MEDIO5.5 | An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_DeleteFilter() located in swffilter.c. It allows an attacker to cause Denial of Service. | 02/06/2022 |