First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-35081

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_read_header at /src/png2swf.c.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/Cvjark/Poc/blob/main/swftools/png2swf/CVE-2022-35081.mdExploit, Third Party Advisory
https://github.com/matthiaskramm/swftools/issues/183Exploit, Issue Tracking, Third Party Advisory
https://github.com/Cvjark/Poc/blob/main/swftools/png2swf/CVE-2022-35081.mdExploit, Third Party Advisory
https://github.com/matthiaskramm/swftools/issues/183Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: Oct 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-350855.5SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c.CVE-2022-350865.5SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S.CVE-2022-350875.5SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c.CVE-2022-350885.5SWFTools commit 772e55a2 was discovered to contain a heap buffer-overflow via getGifDelayTime at /home/bupt/Desktop/swftools/src/src/gif2swf CVE-2022-350895.5SWFTools commit 772e55a2 was discovered to contain a heap-buffer-overflow via getTransparentColor at /home/bupt/Desktop/swftools/src/gif2swf CVE-2022-35097.5A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.CVE-2022-350905.5SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via __asan_memcpy at /asan/asan_interceptors_memintrinsics.cpp:.CVE-2022-350915.5SWFTools commit 772e55a2 was discovered to contain a floating point exception (FPE) via DCTStream::readMCURow() at /xpdf/Stream.cc.ow()CVE-2022-350925.5SWFTools commit 772e55a2 was discovered to contain a segmentation violation via convert_gfxline at /gfxpoly/convert.c.CVE-2022-350935.5SWFTools commit 772e55a2 was discovered to contain a global buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc.CVE-2022-350945.5SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc.CVE-2022-350955.5SWFTools commit 772e55a2 was discovered to contain a segmentation violation via InfoOutputDev::type3D1 at /pdf/InfoOutputDev.cc.