libming Ming Ming is a library for generating Macromedia Flash files (.swf), written in C

libming v0.4.8 was discovered to contain a memory leak

CVE-2025-29497 - March 27, 2025

libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHFILLSTYLES function.

libming v0.4.8 was discovered to contain a segmentation fault via the decompileDUPLICATECLIP function

CVE-2025-29496 - March 27, 2025

libming v0.4.8 was discovered to contain a segmentation fault via the decompileDUPLICATECLIP function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SWF file.

libming v0.4.8 was discovered to contain a segmentation fault via the decompileGETMEMBER function

CVE-2025-29494 - March 27, 2025

libming v0.4.8 was discovered to contain a segmentation fault via the decompileGETMEMBER function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SWF file.

libming v0.4.8 was discovered to contain a segmentation fault via the decompileGETPROPERTY function

CVE-2025-29493 - March 27, 2025

libming v0.4.8 was discovered to contain a segmentation fault via the decompileGETPROPERTY function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SWF file.

libming v0.4.8 was discovered to contain a segmentation fault

CVE-2025-29492 - March 27, 2025

libming v0.4.8 was discovered to contain a segmentation fault via the decompileSETVARIABLE function.

An allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of libming v0.48

CVE-2025-29491 - March 27, 2025

An allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of libming v0.48 allows attackers to cause a Denial of Service (DoS) via supplying a crafted SWF file.

libming v0.4.8 was discovered to contain a segmentation fault via the decompileCALLMETHOD function

CVE-2025-29490 - March 27, 2025

libming v0.4.8 was discovered to contain a segmentation fault via the decompileCALLMETHOD function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SWF file.

libming v0.4.8 was discovered to contain a memory leak

CVE-2025-29489 - March 27, 2025

libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHLINESTYLES function.

libming v0.4.8 was discovered to contain a memory leak

CVE-2025-29488 - March 27, 2025

libming v0.4.8 was discovered to contain a memory leak via the parseSWF_INITACTION function.

An out-of-memory error in the parseABC_STRING_INFO function of libming v0.4.8

CVE-2025-29487 - March 27, 2025

An out-of-memory error in the parseABC_STRING_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allocator exhaustion.

libming v0.4.8 was discovered to contain a memory leak

CVE-2025-29486 - March 27, 2025

libming v0.4.8 was discovered to contain a memory leak via the parseSWF_PLACEOBJECT3 function.

libming v0.4.8 was discovered to contain a memory leak

CVE-2025-29483 - March 27, 2025

libming v0.4.8 was discovered to contain a memory leak via the parseSWF_ENABLEDEBUGGER2 function.

An out-of-memory error in the parseABC_NS_SET_INFO function of libming v0.4.8

CVE-2025-29484 - March 27, 2025

An out-of-memory error in the parseABC_NS_SET_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allocator exhaustion.

libming v0.4.8 was discovered to contain a segmentation fault via the decompileRETURN function

CVE-2025-29485 - March 27, 2025

libming v0.4.8 was discovered to contain a segmentation fault via the decompileRETURN function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SWF file.

A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.

CVE-2025-26304 - February 20, 2025

A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.

Multiple memory leaks have been identified in the clip actions parsing functions (parseSWF_CLIPACTIONS and parseSWF_CLIPACTIONRECORD) in util/parser.c of libming v0.4.8, which

CVE-2025-26311 - February 20, 2025

Multiple memory leaks have been identified in the clip actions parsing functions (parseSWF_CLIPACTIONS and parseSWF_CLIPACTIONRECORD) in util/parser.c of libming v0.4.8, which allow attackers to cause a denial of service via a crafted SWF file.

Multiple memory leaks have been identified in the ABC file parsing functions (parseABC_CONSTANT_POOL and `parseABC_FILE) in util/parser.c of libming v0.4.8, which

CVE-2025-26310 - February 20, 2025

Multiple memory leaks have been identified in the ABC file parsing functions (parseABC_CONSTANT_POOL and `parseABC_FILE) in util/parser.c of libming v0.4.8, which allow attackers to cause a denial of service via a crafted ABC file.

A memory leak has been identified in the parseSWF_DEFINESCENEANDFRAMEDATA function in util/parser.c of libming v0.4.8, which

CVE-2025-26309 - February 20, 2025

A memory leak has been identified in the parseSWF_DEFINESCENEANDFRAMEDATA function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.

A memory leak has been identified in the parseSWF_FILTERLIST function in util/parser.c of libming v0.4.8, which

CVE-2025-26308 - February 20, 2025

A memory leak has been identified in the parseSWF_FILTERLIST function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.

A memory leak has been identified in the parseSWF_IMPORTASSETS2 function in util/parser.c of libming v0.4.8, which

CVE-2025-26307 - February 20, 2025

A memory leak has been identified in the parseSWF_IMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.

A memory leak has been identified in the readSizedString function in util/read.c of libming v0.4.8, which

CVE-2025-26306 - February 20, 2025

A memory leak has been identified in the readSizedString function in util/read.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted file.

A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which

CVE-2025-26305 - February 20, 2025

A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.

A memory leak issue discovered in parseSWF_TEXTRECORD in libming v0.4.8

CVE-2024-24150 6.5 - Medium - February 29, 2024

A memory leak issue discovered in parseSWF_TEXTRECORD in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file.

Memory Leak

A memory leak issue discovered in parseSWF_DEFINEBUTTON in libming v0.4.8

CVE-2024-24146 6.5 - Medium - February 29, 2024

A memory leak issue discovered in parseSWF_DEFINEBUTTON in libming v0.4.8 allows attackers to cause s denial of service via a crafted SWF file.

Memory Leak

A memory leak issue discovered in parseSWF_FILLSTYLEARRAY in libming v0.4.8

CVE-2024-24147 6.5 - Medium - February 29, 2024

A memory leak issue discovered in parseSWF_FILLSTYLEARRAY in libming v0.4.8 allows attackers to cause s denial of service via a crafted SWF file.

Memory Leak

A memory leak issue discovered in parseSWF_GLYPHENTRY in libming v0.4.8

CVE-2024-24149 6.5 - Medium - February 29, 2024

A memory leak issue discovered in parseSWF_GLYPHENTRY in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file.

Memory Leak

A memory leak issue discovered in parseSWF_FREECHARACTER in libming v0.4.8

CVE-2024-24148 - February 28, 2024

A memory leak issue discovered in parseSWF_FREECHARACTER in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file.

libming 0.4.8 contains a memory leak vulnerability in /libming/src/actioncompiler/listaction.c.

CVE-2024-25770 - February 26, 2024

libming 0.4.8 contains a memory leak vulnerability in /libming/src/actioncompiler/listaction.c.

Buffer Overflow vulnerability in libming version 0.4.8

CVE-2023-50628 9.8 - Critical - December 20, 2023

Buffer Overflow vulnerability in libming version 0.4.8, allows attackers to execute arbitrary code and obtain sensitive information via parser.c component.

Classic Buffer Overflow

Buffer Overflow vulnerability in Libming Libming v.0.4.8

CVE-2023-40781 6.5 - Medium - August 28, 2023

Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a denial of service via a crafted .swf file to the makeswf function.

Memory Corruption

libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function at parser.c.

CVE-2023-36239 8.8 - High - June 22, 2023

libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function at parser.c.

Classic Buffer Overflow

An issue found in libming v.0.4.8

CVE-2021-31240 7.8 - High - May 09, 2023

An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWF_IMPORTASSETS function in the parser.c file.

Memory Leak

Buffer Overflow vulnerability found in Libming swftophp v.0.4.8

CVE-2023-30083 5.5 - Medium - May 09, 2023

Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the newVar_N in util/decompile.c.

Classic Buffer Overflow

An issue found in libming swftophp v.0.4.8

CVE-2023-30084 5.5 - Medium - May 09, 2023

An issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the stackVal function in util/decompile.c.

Out-of-bounds Read

Buffer Overflow vulnerability found in Libming swftophp v.0.4.8

CVE-2023-30085 5.5 - Medium - May 09, 2023

Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the cws2fws function in util/decompile.c.

Classic Buffer Overflow

libming v0.4.8 was discovered to contain a stack buffer overflow

CVE-2023-31976 8.8 - High - May 09, 2023

libming v0.4.8 was discovered to contain a stack buffer overflow via the function makeswf_preprocess at /util/makeswf_utils.c.

Memory Corruption

libming 0.4.8 0.4.8 is vulnerable to Buffer Overflow

CVE-2022-44232 7.5 - High - April 26, 2023

libming 0.4.8 0.4.8 is vulnerable to Buffer Overflow. In getInt() in decompile.c unknown type may lead to denial of service. This is a different vulnerability than CVE-2018-9132 and CVE-2018-20427.

Classic Buffer Overflow

In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check

CVE-2021-44591 6.5 - Medium - January 06, 2022

In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check that would lead to denial-of-service attacks via a crafted SWF file.

Allocation of Resources Without Limits or Throttling

In libming 0.4.8, a memory exhaustion vulnerability exist in the function cws2fws in util/main.c

CVE-2021-44590 6.5 - Medium - January 06, 2022

In libming 0.4.8, a memory exhaustion vulnerability exist in the function cws2fws in util/main.c. Remote attackers could launch denial of service attacks by submitting a crafted SWF file that exploits this vulnerability.

Allocation of Resources Without Limits or Throttling

Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF() in decompile.c.

CVE-2020-11894 9.1 - Critical - April 19, 2020

Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF() in decompile.c.

Out-of-bounds Read

Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF() in decompile.c.

CVE-2020-11895 9.1 - Critical - April 19, 2020

Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF() in decompile.c.

Out-of-bounds Read

Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c.

CVE-2020-6628 8.8 - High - January 09, 2020

Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c.

Out-of-bounds Read

Ming (aka libming) 0.4.8 has z NULL pointer dereference in the function decompileGETURL2() in decompile.c.

CVE-2020-6629 6.5 - Medium - January 09, 2020

Ming (aka libming) 0.4.8 has z NULL pointer dereference in the function decompileGETURL2() in decompile.c.

NULL Pointer Dereference

Ming (aka libming) 0.4.8 has an out of bounds read vulnerability in the function OpCode() in the decompile.c file in libutil.a.

CVE-2019-16705 9.1 - Critical - September 23, 2019

Ming (aka libming) 0.4.8 has an out of bounds read vulnerability in the function OpCode() in the decompile.c file in libutil.a.

Out-of-bounds Read

In Ming (aka libming) 0.4.8

CVE-2019-12980 6.5 - Medium - June 26, 2019

In Ming (aka libming) 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the SWFInput_readSBits function in blocks/input.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.

Integer Overflow or Wraparound

Ming (aka libming) 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a

CVE-2019-12982 6.5 - Medium - June 26, 2019

Ming (aka libming) 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted SWF file.

Buffer Overflow

Ming (aka libming) 0.4.8 has an "fill overflow" vulnerability in the function SWFShape_setLeftFillStyle in blocks/shape.c.

CVE-2019-12981 8.8 - High - June 26, 2019

Ming (aka libming) 0.4.8 has an "fill overflow" vulnerability in the function SWFShape_setLeftFillStyle in blocks/shape.c.

Buffer Overflow

An issue was discovered in libming 0.4.8

CVE-2019-3572 6.5 - Medium - January 02, 2019

An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated with an erroneous call to png_write_row in libpng, an out-of-bounds write might occur for some memory layouts.

Out-of-bounds Read

A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8

CVE-2018-20591 6.5 - Medium - December 30, 2018

A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by swftocxx.

Out-of-bounds Read

libming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file

CVE-2018-20429 8.8 - High - December 24, 2018

libming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file, a different vulnerability than CVE-2018-7872 and CVE-2018-9165.

NULL Pointer Dereference

libming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file

CVE-2018-20428 8.8 - High - December 24, 2018

libming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file, a different vulnerability than CVE-2018-7874.

NULL Pointer Dereference

libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file

CVE-2018-20427 8.8 - High - December 24, 2018

libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file, a different vulnerability than CVE-2018-9132.

NULL Pointer Dereference

libming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file

CVE-2018-20426 8.8 - High - December 24, 2018

libming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file, a different vulnerability than CVE-2018-7866.

NULL Pointer Dereference

libming 0.4.8 has a NULL pointer dereference in the pushdup function of the decompile.c file.

CVE-2018-20425 8.8 - High - December 24, 2018

libming 0.4.8 has a NULL pointer dereference in the pushdup function of the decompile.c file.

NULL Pointer Dereference

An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12

CVE-2018-15871 6.5 - Medium - August 25, 2018

An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

Buffer Overflow

An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12

CVE-2018-15870 6.5 - Medium - August 25, 2018

An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

Buffer Overflow

In libming 0.4.8

CVE-2018-13251 6.5 - Medium - July 05, 2018

In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWF_DEFINEBITSJPEG2. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.

Resource Exhaustion

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT

CVE-2018-13250 6.5 - Medium - July 05, 2018

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.

NULL Pointer Dereference

There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service

CVE-2018-13066 7.5 - High - July 02, 2018

There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWF_DEFINEBUTTON2, parseSWF_DEFINEFONT, parseSWF_DEFINEFONTINFO, parseSWF_DEFINELOSSLESS, parseSWF_DEFINESPRITE, parseSWF_DEFINETEXT, parseSWF_DOACTION, parseSWF_FILLSTYLEARRAY, parseSWF_FRAMELABEL, parseSWF_LINESTYLEARRAY, parseSWF_PLACEOBJECT2, or parseSWF_SHAPEWITHSTYLE.

Missing Release of Resource after Effective Lifetime

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which

CVE-2018-11226 8.8 - High - May 17, 2018

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.

Buffer Overflow

The dcputs function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which

CVE-2018-11225 8.8 - High - May 17, 2018

The dcputs function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.

Buffer Overflow

The decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which

CVE-2018-11100 8.8 - High - May 15, 2018

The decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.

Buffer Overflow

The decompileJUMP function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which

CVE-2018-11095 8.8 - High - May 15, 2018

The decompileJUMP function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.

Buffer Overflow

The newVar_N function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which

CVE-2018-11017 8.8 - High - May 13, 2018

The newVar_N function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.

Buffer Overflow

The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may

CVE-2018-9165 6.5 - Medium - April 01, 2018

The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted SWF file.

NULL Pointer Dereference

libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file

CVE-2018-9132 6.5 - Medium - March 30, 2018

libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.

NULL Pointer Dereference

In libming 0.4.8

CVE-2018-9009 8.8 - High - March 25, 2018

In libming 0.4.8, there is a use-after-free in the decompileJUMP function of the decompile.c file.

Dangling pointer

In libming 0.4.8, the decompileDELETE function of decompile.c has a use-after-free

CVE-2018-8964 6.5 - Medium - March 23, 2018

In libming 0.4.8, the decompileDELETE function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.

Dangling pointer

In libming 0.4.8, the decompileGETVARIABLE function of decompile.c has a use-after-free

CVE-2018-8963 6.5 - Medium - March 23, 2018

In libming 0.4.8, the decompileGETVARIABLE function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.

Dangling pointer

In libming 0.4.8, the decompileSingleArgBuiltInFunctionCall function of decompile.c has a use-after-free

CVE-2018-8962 6.5 - Medium - March 23, 2018

In libming 0.4.8, the decompileSingleArgBuiltInFunctionCall function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.

Dangling pointer

In libming 0.4.8, the decompilePUSHPARAM function of decompile.c has a use-after-free

CVE-2018-8961 6.5 - Medium - March 23, 2018

In libming 0.4.8, the decompilePUSHPARAM function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.

Dangling pointer

In libming 0.4.8, these is a use-after-free in the function decompileCALLFUNCTION of decompile.c

CVE-2018-8807 6.5 - Medium - March 20, 2018

In libming 0.4.8, these is a use-after-free in the function decompileCALLFUNCTION of decompile.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.

Dangling pointer

In libming 0.4.8, there is a use-after-free in the decompileArithmeticOp function of decompile.c

CVE-2018-8806 6.5 - Medium - March 20, 2018

In libming 0.4.8, there is a use-after-free in the decompileArithmeticOp function of decompile.c. Remote attackers could use this vulnerability to cause a denial-of-service via a crafted swf file.

Dangling pointer

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data

CVE-2018-7873 6.5 - Medium - March 08, 2018

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack.

Memory Corruption

A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8

CVE-2018-7866 6.5 - Medium - March 08, 2018

A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

NULL Pointer Dereference

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf

CVE-2018-7867 6.5 - Medium - March 08, 2018

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead to a denial of service attack.

Memory Corruption

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data

CVE-2018-7868 6.5 - Medium - March 08, 2018

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack.

Out-of-bounds Read

There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8

CVE-2018-7869 7.5 - High - March 08, 2018

There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack.

Missing Release of Resource after Effective Lifetime

An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data

CVE-2018-7870 6.5 - Medium - March 08, 2018

An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

NULL Pointer Dereference

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data

CVE-2018-7871 8.8 - High - March 08, 2018

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial of service or possibly unspecified other impact.

Out-of-bounds Read

An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data

CVE-2018-7872 6.5 - Medium - March 08, 2018

An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

NULL Pointer Dereference

An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8

CVE-2018-7874 6.5 - Medium - March 08, 2018

An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.

Buffer Overflow

There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data

CVE-2018-7875 6.5 - Medium - March 08, 2018

There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack.

Out-of-bounds Read

In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c, which

CVE-2018-7876 6.5 - Medium - March 08, 2018

In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c, which allows remote attackers to cause a denial of service via a crafted file.

Resource Exhaustion

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data

CVE-2018-7877 6.5 - Medium - March 08, 2018

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a denial of service attack.

Memory Corruption

The decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after-free, which may

CVE-2018-6359 8.8 - High - January 27, 2018

The decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file.

Dangling pointer

The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may

CVE-2018-6358 8.8 - High - January 27, 2018

The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB file.

Memory Corruption

The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which may

CVE-2018-6315 8.8 - High - January 25, 2018

The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file.

Integer Overflow or Wraparound

In libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the readUInt32 function (util/read.c)

CVE-2018-5294 6.5 - Medium - January 08, 2018

In libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the readUInt32 function (util/read.c). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.

Integer Overflow or Wraparound

In libming 0.4.8

CVE-2018-5251 6.5 - Medium - January 05, 2018

In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file.

Incorrect Conversion between Numeric Types