CVE-2022-40009: Swftools

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function grow_unicode at /lib/ttf.c.

Affected products

• Swftools Swftools: version 2021-12-16 only

Published 2022-09-20. Last modified 2026-06-17.