Skip to content
OpenAdvisories
High · 7.8 CVE-2024-22956 EUVD-2024-20481GHSA-rh5p-x36q-j9gf

swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838

Published Jan 19, 2024 · Updated May 30, 2025 · Assigned by mitre

Description

swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/src/swfc.c:838

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS swftools No fix yet —
Ubuntu 16.04 LTS swftools No fix yet —

References