CVE-2021-39598

Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710

Description: An issue exists in the function callcode() located in code.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference.

Recommendations: For versions through 20200710, consider disabling the callcode() function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.