CVE-2018-8806

2018-03-2005:29:00

Google

osv.dev

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.1%

JSON

In libming 0.4.8, there is a use-after-free in the decompileArithmeticOp function of decompile.c. Remote attackers could use this vulnerability to cause a denial-of-service via a crafted swf file.

CPENameOperatorVersion
libmingeqming-0_4_7
libmingeqming-0_4_0_rc2
libmingeqming-0_4_4
libmingeqming-0_4_0_beta5
libmingeqming-0_4_0_beta4
libmingeqming-0_4_6
libmingeqming-0_4_5
libmingeqming-0_3_0
libmingeqming-0_4_3
libmingeqming-0_4_8

Name	Operator	Version
libming	eq	ming-0_4_7
libming	eq	ming-0_4_0_rc2
libming	eq	ming-0_4_4
libming	eq	ming-0_4_0_beta5
libming	eq	ming-0_4_0_beta4
libming	eq	ming-0_4_6
libming	eq	ming-0_4_5
libming	eq	ming-0_3_0
libming	eq	ming-0_4_3
libming	eq	ming-0_4_8

Rows per page:

1-10 of 131

References

github.com/libming/libming/issues/128