CVE-2024-22914: Swftools

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It allows an attacker to cause denial of service.

Affected products

• Swftools Swftools: version 0.9.2 only

Published 2024-01-19. Last modified 2026-06-17.