CVE-2019-12980

2019-06-2618:15:10

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.3%

JSON

In Ming (aka libming) 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the SWFInput_readSBits function in blocks/input.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.

CPENameOperatorVersion
libmingeqming-0_4_0_rc1
libmingeqming-0_3_0
libmingeqming-0_4_5
libmingeqming-0_4_0_beta4
libmingeqming-0_4_0_beta5
libmingeqming-0_4_4
libmingeqming-0_4_6
libmingeqming-0_4_0_beta3
libmingeqming-0_4_0_rc2
libmingeqming-0_4_7

Name	Operator	Version
libming	eq	ming-0_4_0_rc1
libming	eq	ming-0_3_0
libming	eq	ming-0_4_5
libming	eq	ming-0_4_0_beta4
libming	eq	ming-0_4_0_beta5
libming	eq	ming-0_4_4
libming	eq	ming-0_4_6
libming	eq	ming-0_4_0_beta3
libming	eq	ming-0_4_0_rc2
libming	eq	ming-0_4_7