PatchTheCVEswfmill vulnerabilities and fixes
Recent CVEs affecting swfmill, with upgrade or downgrade steps. 8 tracked.
swfmill has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2022-08-16. Highest priority: CVE-2022-36144 (score 39/100).
- CVE-2022-36146 MEDIUM 5.5 UPGRADE SWFMill commit 53d7690 was discovered to contain a memory allocation issue via operator new[](unsigned long) a
- CVE-2022-36145 MEDIUM 5.5 UPGRADE SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::Reader::getWord().
- CVE-2022-36144 HIGH 7.8 UPGRADE SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via base64_encode.
- CVE-2022-36143 HIGH 7.8 UPGRADE SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via __interceptor_strlen.part at /sani
- CVE-2022-36142 HIGH 7.8 UPGRADE SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Reader::getU30().
- CVE-2022-36141 MEDIUM 5.5 UPGRADE SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::MethodBody::write(SWF::Writ
- CVE-2022-36140 MEDIUM 5.5 UPGRADE SWFMill commit 53d7690 was discovered to contain a segmentation violation via SWF::DeclareFunction2::write(SWF
- CVE-2022-36139 HIGH 7.8 UPGRADE SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via SWF::Writer::writeByte(unsigned ch
FAQ
How do I fix swfmill vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is swfmill being exploited right now?
None of the tracked swfmill CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which swfmill CVE should I patch first?
CVE-2022-36144 currently ranks highest (39/100): SWFMill commit 53d7690 was discovered to contain a heap-buffer overflow via base64_encode..