Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-35098 EUVD-2022-37996GHSA-82hg-7wf7-rhvf

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via GfxICCBasedColorSpace::getDefaultColor(GfxColor*) at /xpdf/Gf…

Published Sep 23, 2022 · Updated May 22, 2025 · Assigned by mitre

Description

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via GfxICCBasedColorSpace::getDefaultColor(GfxColor*) at /xpdf/GfxState.cc.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS swftools No fix yet —
Ubuntu 16.04 LTS swftools No fix yet —

References