CVE-2021-42203
Publication date 2 June 2022
Last updated 26 August 2025
Ubuntu priority
Description
An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c. It allows an attacker to cause code execution.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| swftools | 18.04 LTS bionic |
Needs evaluation
|
| 16.04 LTS xenial |
Needs evaluation
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
7.8 · High
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H