---
title: "swftools vulnerabilities: CVEs, CISA KEV and security advisories"
url: https://radicalnotion.ai/vendor/swftools
type: vendor
description: "swftools has 126 published CVEs, 0 in CISA KEV and 106 with public exploits."
updated: 2025-06-19
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# swftools vulnerabilities

- **Published CVEs:** 126
- **In CISA KEV:** 0
- **With a public exploit:** 106
- **With a patch:** 2
- **Average CVSS:** 6.5
- **CVEs in the last two years:** 1
- **First CVE:** 2010-08-17
- **Latest CVE:** 2025-06-19

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 4 |
| High | 44 |
| Medium | 78 |
| Low | 0 |
| Unscored | 0 |

## Most affected products

| Product | CVEs |
| --- | --- |
| [swftools](https://radicalnotion.ai/vendor/swftools/swftools) | 126 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-787](https://radicalnotion.ai/cwe/cwe-787) | Out-of-bounds Write | 40 |
| [CWE-476](https://radicalnotion.ai/cwe/cwe-476) | NULL Pointer Dereference | 35 |
| [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 13 |
| [CWE-125](https://radicalnotion.ai/cwe/cwe-125) | Out-of-bounds Read | 11 |
| [CWE-416](https://radicalnotion.ai/cwe/cwe-416) | Use After Free | 9 |
| [CWE-120](https://radicalnotion.ai/cwe/cwe-120) | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | 3 |
| [CWE-401](https://radicalnotion.ai/cwe/cwe-401) | Missing Release of Memory after Effective Lifetime | 3 |
| [CWE-770](https://radicalnotion.ai/cwe/cwe-770) | Allocation of Resources Without Limits or Throttling | 3 |

## Assigning CNAs

| CNA | CVEs |
| --- | --- |
| [mitre](https://radicalnotion.ai/cna/mitre) | 124 |
| [VulDB](https://radicalnotion.ai/cna/vuldb) | 1 |
| [flexera](https://radicalnotion.ai/cna/flexera) | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2018 | 1 |
| 2019 | 0 |
| 2020 | 0 |
| 2021 | 32 |
| 2022 | 41 |
| 2023 | 4 |
| 2024 | 19 |
| 2025 | 1 |

## Latest CVEs

| CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2025-6271 | swftools wav2swf wav.c wav\_convert2mono out-of-bounds | medium | 4.8 | 0.3% | No | 2025-06-19 |
| CVE-2024-28458 | - | high | 7.5 | 0.7% | No | 2024-04-11 |
| CVE-2024-26334 | - | medium | 6.2 | 0.3% | No | 2024-03-05 |
| CVE-2024-26339 | - | critical | 9.1 | 0.8% | No | 2024-03-05 |
| CVE-2024-26333 | - | medium | 5.5 | 0.3% | No | 2024-03-05 |
| CVE-2024-26337 | - | medium | 4.3 | 0.6% | No | 2024-03-05 |
| CVE-2024-26335 | - | medium | 5.5 | 0.4% | No | 2024-03-05 |
| CVE-2024-25165 | - | high | 8.8 | 0.5% | No | 2024-02-14 |
| CVE-2024-22912 | - | high | 7.8 | 0.4% | No | 2024-01-19 |
| CVE-2024-22920 | - | high | 7.8 | 0.3% | No | 2024-01-19 |
| CVE-2024-22956 | - | high | 7.8 | 0.4% | No | 2024-01-19 |
| CVE-2024-22957 | - | medium | 5.5 | 0.3% | No | 2024-01-19 |

## Frequently asked questions

### How many CVEs does swftools have?

swftools has 126 published CVE records since 2010, including 1 in the last two years.

### How many swftools CVEs are in CISA KEV?

None of swftools's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Which swftools products have the most CVEs?

The swftools products with the most published CVEs are swftools.

### What are the most common weakness types in swftools CVEs?

swftools's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-476 (NULL Pointer Dereference), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-125 (Out-of-bounds Read).

### Are there public exploits for swftools vulnerabilities?

Yes — 106 of swftools's CVEs have a known public exploit.

### How many critical swftools vulnerabilities are there?

swftools has 4 critical and 44 high-severity CVEs.

### What is the average severity of swftools CVEs?

The average CVSS base score across swftools's scored CVEs is 6.5.

## Related vendors

- [Cap-go](https://radicalnotion.ai/vendor/cap-go) (127 CVEs)
- [carmelo](https://radicalnotion.ai/vendor/carmelo) (127 CVEs)
- [ChurchCRM](https://radicalnotion.ai/vendor/churchcrm) (127 CVEs)
- [Accellion](https://radicalnotion.ai/vendor/accellion) (126 CVEs)
- [Axis Communications](https://radicalnotion.ai/vendor/axis) (126 CVEs)
- [Johnson Controls](https://radicalnotion.ai/vendor/johnson-controls) (126 CVEs)
- [libming](https://radicalnotion.ai/vendor/libming) (126 CVEs)
- [Philips](https://radicalnotion.ai/vendor/philips) (125 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/swftools). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.