PT-2024-21356 · Swftools · Swftools

Guangbuming · Published 2024-03-05 · Updated 2025-04-01 · CVE-2024-26333

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions swftools version 0.9.2

Description The issue is related to a segmentation violation in the function free lines at swftools/lib/modules/swfshape.c. This indicates a potential memory access error that could lead to unexpected program behavior or crashes.

Recommendations For swftools version 0.9.2, as a temporary workaround, consider disabling the free lines function until a patch is available. However, since this is a core functionality issue, the best course of action would be to wait for an official update or patch from the developers that addresses the segmentation violation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2024-26333

Affected Products

Swftools

References · 10

• 🔥 https://github.com/matthiaskramm/swftools/issues/219 · Exploit
• https://ubuntu.com/security/CVE-2024-26333 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-26333 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-26333 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26333 · Security Note
• https://osv.dev/vulnerability/CVE-2024-26333 · Vendor Advisory
• https://t.me/cvenotify/117195 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1764978977431502974 · Twitter Post
• https://t.me/cvenotify/72992 · Telegram Post
• https://twitter.com/CVEnew/status/1764928610270429357 · Twitter Post