Heap Buffer Overflow in swftools Affects Popular Software Package
CVE-2021-39579

7.8HIGH

Key Information:

Vendor

Swftools

Status
Swftools
Vendor
CVE Published:
20 September 2021

What is CVE-2021-39579?

A heap buffer overflow vulnerability has been identified in swftools version 20200710, specifically within the string_hash() function located in the file q.c. This vulnerability can be exploited by an attacker to execute arbitrary code, posing significant security risks to users relying on this software package.

References

https://github.com/matthiaskramm/swftools/issues/125
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.