CVE-2023-26991: Swftools

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

SWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swf_ReadSWF2 function in lib/rfxswf.c.

Affected products

• Swftools Swftools: version 0.9.2 only

Published 2023-04-04. Last modified 2026-06-17.