← All advisories

Critical severity9.8NVD Advisory· Published Sep 20, 2022· Updated Jun 17, 2026

CVE-2022-40009

CVE-2022-40009

Description

SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function grow_unicode at /lib/ttf.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Swftools/Swftools2 versions
cpe:2.3:a:swftools:swftools:2021-12-16:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:swftools:swftools:2021-12-16:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

1

github.com/matthiaskramm/swftools/issues/190nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.