CVE-2021-39595

Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710

Description: An issue was discovered in the function rfx alloc() located in mem.c, which allows an attacker to cause code execution due to a stack-buffer-overflow.

Recommendations: For versions through 20200710, consider disabling the rfx alloc() function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.