CVE-2025-6271CWE-119CWE-125
swftools wav2swf wav.c wav_convert2mono out-of-bounds
Medium · published June 19, 2025
What it is
A vulnerability, which was classified as problematic, was found in swftools up to 0.9.2. This affects the function wav_convert2mono in the library lib/wav.c of the component wav2swf. The manipulation leads to out-of-bounds read. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
The record
Technical detail
- CVSS v4.0
- 4.8 · MEDIUM
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
- EPSS
- 0.00260 · 16.8th percentile
- Weaknesses
- CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-125 · Out-of-bounds Read
- Published
- 2025-06-19T17:31Z
EPSS history
Timeline