CVE-2024-26335

MEDIUM

swftools v0.9.2 - Use-After-Free in state_free Function

Title source: llm

swftools v0.9.2 was discovered to contain a segmentation violation via the function state_free at swftools/src/swfc-history.c.

Core 1

Core References

Exploit, Issue Tracking, Third Party Advisory

CVSS v3 5.5

EPSS 0.0038

EPSS Percentile 29.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-119

Status published

Products (1)

swftools/swftools 0.9.2

Published Mar 05, 2024

Tracked Since Feb 18, 2026