Skip to content
OpenAdvisories
High · 7.8 CVE-2024-22920 EUVD-2024-20445GHSA-p4cw-mpfx-4796

swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c.

Published Jan 19, 2024 · Updated Sep 11, 2024 · Assigned by mitre

Description

swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS swftools No fix yet —
Ubuntu 16.04 LTS swftools No fix yet —

References