| CVE-2025-6271 | BAJO3.3 | A vulnerability, which was classified as problematic, was found in swftools up to 0.9.2. This affects the function wav_convert2mono in the library lib/wav.c of the component wav2swf. The manipulation leads to out-of-bounds read. The attack needs to be approached locally. The exploit has been disclosed to the public and | 19/06/2025 |
| CVE-2024-28458 | ALTO7.5 | Null Pointer Dereference vulnerability in swfdump in swftools 0.9.2 allows attackers to crash the appliation via the function compileSWFActionCode in action/actioncompiler.c. | 11/04/2024 |
| CVE-2024-26339 | CRÍTICO9.1 | swftools v0.9.2 was discovered to contain a strcpy parameter overlap via /home/swftools/src/swfc+0x48318a. | 05/03/2024 |
| CVE-2024-26337 | MEDIO4.3 | swftools v0.9.2 was discovered to contain a segmentation violation via the function s_font at swftools/src/swfc.c. | 05/03/2024 |
| CVE-2024-26335 | MEDIO5.5 | swftools v0.9.2 was discovered to contain a segmentation violation via the function state_free at swftools/src/swfc-history.c. | 05/03/2024 |
| CVE-2024-26334 | MEDIO6.2 | swftools v0.9.2 was discovered to contain a segmentation violation via the function compileSWFActionCode at swftools/lib/action/actioncompiler.c. | 05/03/2024 |
| CVE-2024-26333 | MEDIO5.5 | swftools v0.9.2 was discovered to contain a segmentation violation via the function free_lines at swftools/lib/modules/swfshape.c. | 05/03/2024 |
| CVE-2024-25165 | ALTO7.8 | A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex. | 14/02/2024 |
| CVE-2024-22957 | MEDIO5.5 | swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dict_do_lookup in swftools/lib/q.c:1190. | 19/01/2024 |
| CVE-2024-22956 | ALTO7.8 | swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838 | 19/01/2024 |
| CVE-2024-22955 | ALTO7.8 | swftools 0.9.2 was discovered to contain a stack-buffer-underflow vulnerability via the function parseExpression at swftools/src/swfc.c:2576. | 19/01/2024 |
| CVE-2024-22919 | ALTO7.8 | swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587. | 19/01/2024 |
| CVE-2024-22915 | ALTO7.8 | A heap-use-after-free was found in SWFTools v0.9.2, in the function swf_DeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution. | 19/01/2024 |
| CVE-2024-22914 | MEDIO5.5 | A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It allows an attacker to cause denial of service. | 19/01/2024 |
| CVE-2024-22913 | ALTO7.8 | A heap-buffer-overflow was found in SWFTools v0.9.2, in the function swf5lex at lex.swf5.c:1321. It allows an attacker to cause code execution. | 19/01/2024 |
| CVE-2024-22912 | ALTO7.8 | A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause code execution. | 19/01/2024 |
| CVE-2024-22911 | ALTO7.8 | A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602. | 19/01/2024 |
| CVE-2024-22920 | ALTO7.8 | swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c. | 19/01/2024 |
| CVE-2024-22562 | ALTO7.8 | swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dict_foreach_keyvalue at swftools/lib/q.c. | 19/01/2024 |
| CVE-2023-37644 | MEDIO5.5 | SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in png_read_chunk in lib/png.c. | 11/01/2024 |