Lucene search
HistoryJan 19, 2024 - 6:15 p.m.
CVE-2024-22914
swftools
vulnerability
heap-use-after-free
input function
denial of service
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0
Percentile
12.7%
A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It allows an attacker to cause denial of service.
Affected configurations
Node
swftoolsswftoolsMatch0.9.2
Related
prion
prion
Heap overflow
2024-01-19 18:15:00
ubuntucve
ubuntucve
CVE-2024-22914
2024-01-19 00:00:00
cve
cve
CVE-2024-22914
2024-01-19 18:15:08
vulnrichment
vulnrichment
CVE-2024-22914
2024-01-19 00:00:00
cvelist
cvelist
CVE-2024-22914
2024-01-19 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0
Percentile
12.7%
Related for NVD:CVE-2024-22914