deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-32297
Published: 2021-09-20
Description: An issue was discovered in LIEF through 0.11.4. A heap-buffer-overflow exists in the function main located in pe_reader.c. It allows an attacker to cause code Execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/lief-project/LIEF/issues/449; https://github.com/lief-project/LIEF/issues/449
CVE: CVE-2021-32298
Published: 2021-09-20
Description: An issue was discovered in libiff through 20190123. A global-buffer-overflow exists in the function IFF_errorId located in error.c. It allows an attacker to cause code Execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/svanderburg/libiff/issues/10; https://github.com/svanderburg/libiff/issues/10
CVE: CVE-2021-32299
Published: 2021-09-20
Description: An issue was discovered in pbrt through 20200627. A stack-buffer-overflow exists in the function pbrt::ParamSet::ParamSet() located in paramset.h. It allows an attacker to cause code Execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/mmp/pbrt-v3/issues/296; https://github.com/mmp/pbrt-v3/issues/296
CVE: CVE-2021-38089
Published: 2021-09-20
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-22035. Reason: This candidate is a duplicate of CVE-2020-22035. Notes: All CVE users should reference CVE-2020-22035 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2021-38090
Published: 2021-09-20
Description: Integer Overflow vulnerability in function filter16_roberts in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-190
References: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23; https://trac.ffmpeg.org/ticket/8263; https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23
CVE: CVE-2021-38091
Published: 2021-09-20
Description: Integer Overflow vulnerability in function filter16_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23; https://trac.ffmpeg.org/ticket/8263; https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23
CVE: CVE-2021-38092
Published: 2021-09-20
Description: Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23; https://trac.ffmpeg.org/ticket/8263; https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23
CVE: CVE-2021-38093
Published: 2021-09-20
Description: Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23; https://trac.ffmpeg.org/ticket/8263; https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23
CVE: CVE-2021-38094
Published: 2021-09-20
Description: Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23; https://trac.ffmpeg.org/ticket/8263; https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23
CVE: CVE-2021-39514
Published: 2021-09-20
Description: An issue was discovered in libjpeg through 2020021. An uncaught floating point exception in the function ACLosslessScan::ParseMCU() located in aclosslessscan.cpp. It allows an attacker to cause Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-697
References: https://github.com/thorfdbg/libjpeg/issues/36; https://github.com/thorfdbg/libjpeg/issues/36
CVE: CVE-2021-39515
Published: 2021-09-20
Description: An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function SampleInterleavedLSScan::ParseMCU() located in sampleinterleavedlsscan.cpp. It allows an attacker to cause Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/thorfdbg/libjpeg/issues/37; https://github.com/thorfdbg/libjpeg/issues/37
CVE: CVE-2021-39516
Published: 2021-09-20
Description: An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Get() located in huffmandecoder.hpp. It allows an attacker to cause Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/thorfdbg/libjpeg/issues/42; https://github.com/thorfdbg/libjpeg/issues/42
CVE: CVE-2021-39517
Published: 2021-09-20
Description: An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::ReconstructUnsampled() located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/thorfdbg/libjpeg/issues/33; https://github.com/thorfdbg/libjpeg/issues/33
CVE: CVE-2021-39518
Published: 2021-09-20
Description: An issue was discovered in libjpeg through 2020021. LineBuffer::FetchRegion() in linebuffer.cpp has a heap-based buffer overflow.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/thorfdbg/libjpeg/issues/35; https://github.com/thorfdbg/libjpeg/issues/35
CVE: CVE-2021-39519
Published: 2021-09-20
Description: An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PullQData() located in blockbitmaprequester.cpp It allows an attacker to cause Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/thorfdbg/libjpeg/issues/28; https://github.com/thorfdbg/libjpeg/issues/28
CVE: CVE-2021-39520
Published: 2021-09-20
Description: An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PushReconstructedData() located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/thorfdbg/libjpeg/issues/34; https://github.com/thorfdbg/libjpeg/issues/34
CVE: CVE-2021-39521
Published: 2021-09-20
Description: An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bit_read_BB() located in bits.c. It allows an attacker to cause Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/LibreDWG/libredwg/issues/262; https://github.com/LibreDWG/libredwg/issues/262
CVE: CVE-2021-39522
Published: 2021-09-20
Description: An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2len() in bits.c has a heap-based buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/LibreDWG/libredwg/issues/255; https://github.com/LibreDWG/libredwg/issues/255
CVE: CVE-2021-39523
Published: 2021-09-20
Description: An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function check_POLYLINE_handles() located in decode.c. It allows an attacker to cause Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/LibreDWG/libredwg/issues/251; https://github.com/LibreDWG/libredwg/issues/251
CVE: CVE-2021-39525
Published: 2021-09-20
Description: An issue was discovered in libredwg through v0.10.1.3751. bit_read_fixed() in bits.c has a heap-based buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/LibreDWG/libredwg/issues/261; https://github.com/LibreDWG/libredwg/issues/261
CVE: CVE-2021-39527
Published: 2021-09-20
Description: An issue was discovered in libredwg through v0.10.1.3751. appinfo_private() in decode.c has a heap-based buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/LibreDWG/libredwg/issues/252; https://github.com/LibreDWG/libredwg/issues/252
CVE: CVE-2021-39528
Published: 2021-09-20
Description: An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free.
CVSS Score: 8.8 (HIGH)
CWE: CWE-415
References: https://github.com/LibreDWG/libredwg/issues/256; https://github.com/LibreDWG/libredwg/issues/256
CVE: CVE-2021-39530
Published: 2021-09-20
Description: An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2nlen() in bits.c has a heap-based buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/LibreDWG/libredwg/issues/258; https://github.com/LibreDWG/libredwg/issues/258
CVE: CVE-2021-39531
Published: 2021-09-20
Description: An issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a stack-based buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/Juniper/libslax/issues/53; https://github.com/Juniper/libslax/issues/53
CVE: CVE-2021-39532
Published: 2021-09-20
Description: An issue was discovered in libslax through v0.22.1. A NULL pointer dereference exists in the function slaxLexer() located in slaxlexer.c. It allows an attacker to cause Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/Juniper/libslax/issues/50; https://github.com/Juniper/libslax/issues/50
CVE: CVE-2021-39533
Published: 2021-09-20
Description: An issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a heap-based buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/Juniper/libslax/issues/51; https://github.com/Juniper/libslax/issues/51
CVE: CVE-2021-39534
Published: 2021-09-20
Description: An issue was discovered in libslax through v0.22.1. slaxIsCommentStart() in slaxlexer.c has a heap-based buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/Juniper/libslax/issues/52; https://github.com/Juniper/libslax/issues/52
CVE: CVE-2021-39535
Published: 2021-09-20
Description: An issue was discovered in libxsmm through v1.16.1-93. A NULL pointer dereference exists in JIT code. It allows an attacker to cause Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/hfp/libxsmm/issues/398; https://github.com/hfp/libxsmm/issues/398
CVE: CVE-2021-39536
Published: 2021-09-20
Description: An issue was discovered in libxsmm through v1.16.1-93. The JIT code has a heap-based buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/hfp/libxsmm/issues/402; https://github.com/hfp/libxsmm/issues/402
CVE: CVE-2021-39537
Published: 2021-09-20
Description: An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://cvsweb.netbsd.org/bsdweb.cgi/pkgsrc/devel/ncurses/patches/patch-ncurses_tinfo_captoinfo.c?rev=1.1&content-type=text/x-cvsweb-markup; http://seclists.org/fulldisclosure/2022/Oct/28; http://seclists.org/fulldisclosure/2022/Oct/41
CVE: CVE-2021-39538
Published: 2021-09-20
Description: An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function node::ObjNode::Value() located in objnode.cpp. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/leonhad/pdftools/issues/4; https://github.com/leonhad/pdftools/issues/4
CVE: CVE-2021-39539
Published: 2021-09-20
Description: An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function node::BDCNode::~BDCNode() located in bdcnode.cpp. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/leonhad/pdftools/issues/6; https://github.com/leonhad/pdftools/issues/6
CVE: CVE-2021-39540
Published: 2021-09-20
Description: An issue was discovered in pdftools through 20200714. A stack-buffer-overflow exists in the function Analyze::AnalyzePages() located in analyze.cpp. It allows an attacker to cause code Execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/leonhad/pdftools/issues/2; https://github.com/leonhad/pdftools/issues/2
CVE: CVE-2021-39541
Published: 2021-09-20
Description: An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Analyze::AnalyzeXref() located in analyze.cpp. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/leonhad/pdftools/issues/3; https://github.com/leonhad/pdftools/issues/3
CVE: CVE-2021-39542
Published: 2021-09-20
Description: An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Font::Size() located in font.cpp. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/leonhad/pdftools/issues/5; https://github.com/leonhad/pdftools/issues/5
CVE: CVE-2021-39543
Published: 2021-09-20
Description: An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Analyze::AnalyzeRoot() located in analyze.cpp. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/leonhad/pdftools/issues/1; https://github.com/leonhad/pdftools/issues/1
CVE: CVE-2021-39544
Published: 2021-09-20
Description: An issue was discovered in sela through 20200412. file::WavFile::writeToFile() in wav_file.c has a heap-based buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/sahaRatul/sela/issues/25; https://github.com/sahaRatul/sela/issues/25
CVE: CVE-2021-39545
Published: 2021-09-20
Description: An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function rice::RiceDecoder::process() located in rice_decoder.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/sahaRatul/sela/issues/31; https://github.com/sahaRatul/sela/issues/31
CVE: CVE-2021-39546
Published: 2021-09-20
Description: An issue was discovered in sela through 20200412. rice::RiceDecoder::process() in rice_decoder.cpp has a heap-based buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/sahaRatul/sela/issues/29; https://github.com/sahaRatul/sela/issues/29
CVE: CVE-2021-39547
Published: 2021-09-20
Description: An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function lpc::SampleGenerator::process() located in sample_generator.cpp. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/sahaRatul/sela/issues/32; https://github.com/sahaRatul/sela/issues/32
CVE: CVE-2021-39548
Published: 2021-09-20
Description: An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function frame::FrameDecoder::process() located in frame_decoder.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/sahaRatul/sela/issues/28; https://github.com/sahaRatul/sela/issues/28
CVE: CVE-2021-39549
Published: 2021-09-20
Description: An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function file::WavFile::WavFile() located in wav_file.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/sahaRatul/sela/issues/27; https://github.com/sahaRatul/sela/issues/27
CVE: CVE-2021-39550
Published: 2021-09-20
Description: An issue was discovered in sela through 20200412. file::SelaFile::readFromFile() in sela_file.cpp has a heap-based buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/sahaRatul/sela/issues/30; https://github.com/sahaRatul/sela/issues/30
CVE: CVE-2021-39551
Published: 2021-09-20
Description: An issue was discovered in sela through 20200412. file::SelaFile::readFromFile() in sela_file.c has a heap-based buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/sahaRatul/sela/issues/26; https://github.com/sahaRatul/sela/issues/26
CVE: CVE-2021-39552
Published: 2021-09-20
Description: An issue was discovered in sela through 20200412. file::WavFile::readFromFile() in wav_file.c has a heap-based buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/sahaRatul/sela/issues/23; https://github.com/sahaRatul/sela/issues/23
CVE: CVE-2021-39553
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function grealloc() located in gmem.cc. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/103; https://github.com/matthiaskramm/swftools/issues/103
CVE: CVE-2021-39554
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function Lexer::Lexer() located in Lexer.cc. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/100; https://github.com/matthiaskramm/swftools/issues/100
CVE: CVE-2021-39555
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function InfoOutputDev::type3D0() located in InfoOutputDev.cc. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/99; https://github.com/matthiaskramm/swftools/issues/99
CVE: CVE-2021-39556
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function InfoOutputDev::type3D1() located in InfoOutputDev.cc. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/105; https://github.com/matthiaskramm/swftools/issues/105
CVE: CVE-2021-39557
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function copyString() located in gmem.cc. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/97; https://github.com/matthiaskramm/swftools/issues/97
CVE: CVE-2021-39558
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function VectorGraphicOutputDev::drawGeneralImage() located in VectorGraphicOutputDev.cc. It allows an attacker to cause code Execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/106; https://github.com/matthiaskramm/swftools/issues/106
CVE: CVE-2021-39559
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function GString::~GString() located in GString.cc. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/101; https://github.com/matthiaskramm/swftools/issues/101
CVE: CVE-2021-39561
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function Gfx::opSetFillColorN() located in Gfx.cc. It allows an attacker to cause code Execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/102; https://github.com/matthiaskramm/swftools/issues/102
CVE: CVE-2021-39562
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function FileStream::makeSubStream() located in Stream.cc. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/98; https://github.com/matthiaskramm/swftools/issues/98
CVE: CVE-2021-39563
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_DumpActions() located in swfaction.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/115; https://github.com/matthiaskramm/swftools/issues/115
CVE: CVE-2021-39564
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swf_DumpActions() located in swfaction.c. It allows an attacker to cause code Execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/116; https://github.com/matthiaskramm/swftools/issues/116
CVE: CVE-2021-39569
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function OpAdvance() located in swfaction.c. It allows an attacker to cause code Execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/114; https://github.com/matthiaskramm/swftools/issues/114
CVE: CVE-2021-39574
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function pool_read() located in pool.c. It allows an attacker to cause code Execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/124; https://github.com/matthiaskramm/swftools/issues/124
CVE: CVE-2021-39575
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function dump_method() located in abc.c. It allows an attacker to cause Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/matthiaskramm/swftools/issues/128; https://github.com/matthiaskramm/swftools/issues/128
CVE: CVE-2021-39577
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function main() located in swfdump.c. It allows an attacker to cause code Execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/121; https://github.com/matthiaskramm/swftools/issues/121
CVE: CVE-2021-39579
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function string_hash() located in q.c. It allows an attacker to cause code Execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/125; https://github.com/matthiaskramm/swftools/issues/125
CVE: CVE-2021-39582
Published: 2021-09-20
Description: An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swf_GetPlaceObject() located in swfobject.c. It allows an attacker to cause code Execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/122; https://github.com/matthiaskramm/swftools/issues/122