CVE-2022-35101

What it actually does

Memory corruption in memset-vec-unaligned-erms.S triggers segmentation violation, causing the process to crash.

Why it matters to the business

Workflows that convert or inspect SWF files can be interrupted by unexpected crashes, leading to processing delays in media pipelines.

How an attack unfolds

An attacker supplies a specially crafted SWF file to any swftools binary that reaches the vulnerable memset path; the fault is triggered locally during file parsing, resulting in denial of service. Public exploit code is available.

How to fix it

Update swftools to a version containing the corrected memset implementation; if no upstream fix exists, replace the tool with an alternative SWF processor or sandbox its execution.

How to confirm the fix worked

Re-run the affected binaries against known crashing inputs and confirm absence of segmentation faults; monitor upstream commit history for a fix to 772e55a2.

Typical attack path

1. Obtain or generate malicious SWF input
2. Invoke affected swftools utility (e.g., swfextract, swfrender) on the file
3. Trigger unaligned memset operation
4. Induce segmentation violation and process termination

How to detect it

Inspect system and application logs for segmentation fault entries involving swftools processes; correlate crash timestamps with file-processing jobs that handle untrusted SWF content.

What your security team should do

• Restrict swftools execution to trusted input sources only
• Wrap invocations in resource limits or containers to contain crashes
• Track project commits for a resolution and schedule upgrade once available
• Remove swftools from automated pipelines if feasible