CVE-2025-6271

Name of the Vulnerable Software and Affected Versions swftools versions up to 0.9.2

Description A problematic vulnerability was found in the wav2swf component of swftools, affecting the wav convert2mono function in the lib/wav.c library. This leads to an out-of-bounds read. The attack must be approached locally.

Recommendations For swftools versions up to 0.9.2, as a temporary workaround, consider disabling the wav convert2mono function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.