CVE-2023-37644

MEDIUM

SWFTools 0.9.2 - Out-of-bounds Write via Crafted PDF Document in png_read_chunk

Title source: llm

Description

SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in png_read_chunk in lib/png.c.

References (1)

Core 1

Core References

Exploit, Issue Tracking, Vendor Advisory

https://github.com/matthiaskramm/swftools/issues/202

Scores

CVSS v3 5.5

EPSS 0.0027

EPSS Percentile 18.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-787

Status published

Products (1)

swftools/swftools 0.9.2

Published Jan 11, 2024

Tracked Since Feb 18, 2026