CVE-2025-6271: Swftools

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability, which was classified as problematic, was found in swftools up to 0.9.2. This affects the function wav_convert2mono in the library lib/wav.c of the component wav2swf. The manipulation leads to out-of-bounds read. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Affected products

• Swftools Swftools: before 0.9.2 (fixed in 0.9.2)

Published 2025-06-19. Last modified 2026-06-17.