<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: swftools</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-28458: Null Pointer Dereference vulnerability in swfdump in swftools 0.9.2 allows attackers to crash the appliation v</title><link>https://patchthecve.com/cve/CVE-2024-28458.html</link><guid>https://patchthecve.com/cve/CVE-2024-28458.html</guid><pubDate>Wed, 17 Jun 2026 07:21:28 +0000</pubDate><description>HIGH 7.5: Null Pointer Dereference vulnerability in swfdump in swftools 0.9.2 allows attackers to crash the appliation via the function compileSWFActionCode in action/actioncompiler.c.</description></item><item><title>CVE-2024-26339: swftools v0.9.2 was discovered to contain a strcpy parameter overlap via /home/swftools/src/swfc+0x48318a.</title><link>https://patchthecve.com/cve/CVE-2024-26339.html</link><guid>https://patchthecve.com/cve/CVE-2024-26339.html</guid><pubDate>Wed, 17 Jun 2026 07:17:38 +0000</pubDate><description>CRITICAL 9.1: swftools v0.9.2 was discovered to contain a strcpy parameter overlap via /home/swftools/src/swfc+0x48318a.</description></item><item><title>CVE-2024-26337: swftools v0.9.2 was discovered to contain a segmentation violation via the function s_font at swftools/src/swf</title><link>https://patchthecve.com/cve/CVE-2024-26337.html</link><guid>https://patchthecve.com/cve/CVE-2024-26337.html</guid><pubDate>Wed, 17 Jun 2026 07:17:38 +0000</pubDate><description>MEDIUM 4.3: swftools v0.9.2 was discovered to contain a segmentation violation via the function s_font at swftools/src/swfc.c.</description></item><item><title>CVE-2024-26335: swftools v0.9.2 was discovered to contain a segmentation violation via the function state_free at swftools/src</title><link>https://patchthecve.com/cve/CVE-2024-26335.html</link><guid>https://patchthecve.com/cve/CVE-2024-26335.html</guid><pubDate>Wed, 17 Jun 2026 07:17:38 +0000</pubDate><description>MEDIUM 5.5: swftools v0.9.2 was discovered to contain a segmentation violation via the function state_free at swftools/src/swfc-history.c.</description></item><item><title>CVE-2024-26334: swftools v0.9.2 was discovered to contain a segmentation violation via the function compileSWFActionCode at sw</title><link>https://patchthecve.com/cve/CVE-2024-26334.html</link><guid>https://patchthecve.com/cve/CVE-2024-26334.html</guid><pubDate>Wed, 17 Jun 2026 07:17:38 +0000</pubDate><description>MEDIUM 6.2: swftools v0.9.2 was discovered to contain a segmentation violation via the function compileSWFActionCode at swftools/lib/action/actioncompiler.c.</description></item><item><title>CVE-2024-26333: swftools v0.9.2 was discovered to contain a segmentation violation via the function free_lines at swftools/lib</title><link>https://patchthecve.com/cve/CVE-2024-26333.html</link><guid>https://patchthecve.com/cve/CVE-2024-26333.html</guid><pubDate>Wed, 17 Jun 2026 07:17:37 +0000</pubDate><description>MEDIUM 5.5: swftools v0.9.2 was discovered to contain a segmentation violation via the function free_lines at swftools/lib/modules/swfshape.c.</description></item><item><title>CVE-2024-25165: A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compi</title><link>https://patchthecve.com/cve/CVE-2024-25165.html</link><guid>https://patchthecve.com/cve/CVE-2024-25165.html</guid><pubDate>Wed, 17 Jun 2026 07:15:37 +0000</pubDate><description>HIGH 7.8: A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex.</description></item><item><title>CVE-2024-22957: swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dict_do_lookup i</title><link>https://patchthecve.com/cve/CVE-2024-22957.html</link><guid>https://patchthecve.com/cve/CVE-2024-22957.html</guid><pubDate>Wed, 17 Jun 2026 07:11:57 +0000</pubDate><description>MEDIUM 5.5: swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dict_do_lookup in swftools/lib/q.c:1190.</description></item><item><title>CVE-2024-22956: swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at </title><link>https://patchthecve.com/cve/CVE-2024-22956.html</link><guid>https://patchthecve.com/cve/CVE-2024-22956.html</guid><pubDate>Wed, 17 Jun 2026 07:11:57 +0000</pubDate><description>HIGH 7.8: swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838</description></item><item><title>CVE-2024-22955: swftools 0.9.2 was discovered to contain a stack-buffer-underflow vulnerability via the function parseExpressi</title><link>https://patchthecve.com/cve/CVE-2024-22955.html</link><guid>https://patchthecve.com/cve/CVE-2024-22955.html</guid><pubDate>Wed, 17 Jun 2026 07:11:57 +0000</pubDate><description>HIGH 7.8: swftools 0.9.2 was discovered to contain a stack-buffer-underflow vulnerability via the function parseExpression at swftools/src/swfc.c:2576.</description></item><item><title>CVE-2024-22919: swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpressio</title><link>https://patchthecve.com/cve/CVE-2024-22919.html</link><guid>https://patchthecve.com/cve/CVE-2024-22919.html</guid><pubDate>Wed, 17 Jun 2026 07:11:55 +0000</pubDate><description>HIGH 7.8: swftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function parseExpression at swftools/src/swfc.c:2587.</description></item><item><title>CVE-2024-22915: A heap-use-after-free was found in SWFTools v0.9.2, in the function swf_DeleteTag at rfxswf.c:1193</title><link>https://patchthecve.com/cve/CVE-2024-22915.html</link><guid>https://patchthecve.com/cve/CVE-2024-22915.html</guid><pubDate>Wed, 17 Jun 2026 07:11:54 +0000</pubDate><description>HIGH 7.8: A heap-use-after-free was found in SWFTools v0.9.2, in the function swf_DeleteTag at rfxswf.c:1193. It allows an attacker to cause code execution.</description></item><item><title>CVE-2024-22914: A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620</title><link>https://patchthecve.com/cve/CVE-2024-22914.html</link><guid>https://patchthecve.com/cve/CVE-2024-22914.html</guid><pubDate>Wed, 17 Jun 2026 07:11:54 +0000</pubDate><description>MEDIUM 5.5: A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It allows an attacker to cause denial of service.</description></item><item><title>CVE-2024-22913: A heap-buffer-overflow was found in SWFTools v0.9.2, in the function swf5lex at lex.swf5.c:1321</title><link>https://patchthecve.com/cve/CVE-2024-22913.html</link><guid>https://patchthecve.com/cve/CVE-2024-22913.html</guid><pubDate>Wed, 17 Jun 2026 07:11:54 +0000</pubDate><description>HIGH 7.8: A heap-buffer-overflow was found in SWFTools v0.9.2, in the function swf5lex at lex.swf5.c:1321. It allows an attacker to cause code execution.</description></item><item><title>CVE-2024-22912: A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327</title><link>https://patchthecve.com/cve/CVE-2024-22912.html</link><guid>https://patchthecve.com/cve/CVE-2024-22912.html</guid><pubDate>Wed, 17 Jun 2026 07:11:54 +0000</pubDate><description>HIGH 7.8: A global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler.flex:327. It allows an attacker to cause code execution.</description></item><item><title>CVE-2024-22911: A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/sw</title><link>https://patchthecve.com/cve/CVE-2024-22911.html</link><guid>https://patchthecve.com/cve/CVE-2024-22911.html</guid><pubDate>Wed, 17 Jun 2026 07:11:54 +0000</pubDate><description>HIGH 7.8: A stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function parseExpression at src/swfc.c:2602.</description></item><item><title>CVE-2024-22920: swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/li</title><link>https://patchthecve.com/cve/CVE-2024-22920.html</link><guid>https://patchthecve.com/cve/CVE-2024-22920.html</guid><pubDate>Wed, 17 Jun 2026 07:11:55 +0000</pubDate><description>HIGH 7.8: swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c.</description></item><item><title>CVE-2024-22562: swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dict_foreach_keyvalue at sw</title><link>https://patchthecve.com/cve/CVE-2024-22562.html</link><guid>https://patchthecve.com/cve/CVE-2024-22562.html</guid><pubDate>Wed, 17 Jun 2026 07:11:33 +0000</pubDate><description>HIGH 7.8: swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dict_foreach_keyvalue at swftools/lib/q.c.</description></item><item><title>CVE-2023-37644: SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, a</title><link>https://patchthecve.com/cve/CVE-2023-37644.html</link><guid>https://patchthecve.com/cve/CVE-2023-37644.html</guid><pubDate>Wed, 17 Jun 2026 06:08:33 +0000</pubDate><description>MEDIUM 5.5: SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in png_read_chunk in lib/png.c.</description></item></channel></rss>