NetSight
low3.3

CVE-2025-6271

A vulnerability, which was classified as problematic, was found in swftools up to 0.9.2.

Impact

A vulnerability, which was classified as problematic, was found in swftools up to 0.9.2. This affects the function wav_convert2mono in the library lib/wav.c of the component wav2swf. The manipulation leads to out-of-bounds read. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Affected products

VendorProductAffected versions
SwftoolsSwftools
before 0.9.2

Weakness classification

References