Base Score

MEDIUM5.5

CVE-2024-26335

swftools v0.9.2 was discovered to contain a segmentation violation via the function state_free at swftools/src/swfc-history.c.

VectorNETWORK

Published Bycve@mitre.org

Published DateMar 05, 2024, 09:15

Weakness Type (CWE):CWE-119

CVSS Metrics

Base Score

5.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

LOW

Integrity (I)

LOW

Availability (A)

LOW

References

https://github.com/matthiaskramm/swftools/issues/222

Base Score

MEDIUM5.5

Weakness Type (CWE):CWE-119

CVSS Metrics

Base Score

5.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

REQUIRED

Scope (S)

UNCHANGED

Confidentiality (C)

LOW

Integrity (I)

LOW

Availability (A)

LOW