CVE-2010-1516: Swftools

High severity, CVSS 9.3. EPSS: 3.5% chance of exploitation in the next 30 days.

Multiple integer overflows in SWFTools 0.9.1 allow remote attackers to execute arbitrary code via (1) a crafted PNG file, related to the getPNG function in lib/png.c; or (2) a crafted JPEG file, related to the jpeg_load function in lib/jpeg.c.

Affected products

• Swftools Swftools: version 0.9.1 only

Published 2010-08-17. Last modified 2026-06-16.