CVE-2025-26307

A memory leak has been identified in the parseSWFIMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

PT-2025-7600 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory leak has been identified in the parseSWF DEFINESCENEANDFRAMEDATA function in util/parser.c, which allows attackers to cause a denial of service via a crafted SWF file. Recommendations: For libming...

CVE-2025-26308

CVE-2025-26308 affects libming v0.4.8, where a memory leak in parseSWF_FILTERLIST (util/parser.c) can be triggered by a crafted SWF file to cause denial of service. The linked sources corroborate the issue across multiple feeds (NVD, Red Hat, Veracode, OSV, etc.), all citing the same memory-leak ...

CVE-2025-26307

CVE-2025-26307 affects libming v0.4.8. A memory leak in parseSWF_IMPORTASSETS2 (util/parser.c) can be exploited via a crafted SWF file to cause denial of service. Exploitation details are not provided in the connected documents beyond the DoS implication. The entry indicates a DoS impact with bas...

CVE-2025-26305

CVE-2025-26305 affects libming v0.4.8. The memory leak in parseSWF_SOUNDINFO (util/parser.c) can lead to denial of service when processing crafted SWF files. Base metrics indicate CVSS v3.1: 8.2 (High) with network attack vector, no user interaction, and impact to confidentiality (high) and avail...

CVE-2025-26305

A memory leak has been identified in the parseSWFSOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

PT-2025-7598 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory leak has been identified in the parseSWF IMPORTASSETS2 function in util/parser.c of libming, which allows attackers to cause a denial of service via a crafted SWF file. Recommendations: For libming...

CVE-2025-26311

CVE-2025-26311 affects libming v0.4.8. The vulnerability stems from memory leaks in the clip actions parsing functions (parseSWF_CLIPACTIONS and parseSWF_CLIPACTIONRECORD) in util/parser.c, allowing denial of service via a crafted SWF file. Connected sources confirm the existence of this issue ac...

CVE-2025-26307

A memory leak has been identified in the parseSWFIMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

CVE-2025-26308

A memory leak has been identified in the parseSWFFILTERLIST function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

CVE-2024-12181

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploadsadd.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be...

CVE-2024-12181

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploadsadd.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be...

CVE-2024-12181 DedeCMS SWF File uploads_add.php cross site scripting

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploadsadd.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be...

CVE-2024-12181 DedeCMS SWF File uploads_add.php cross site scripting

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploadsadd.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be...

CVE-2024-12181

CVE-2024-12181 affects DedeCMS 5.7.116; the vulnerability is in the SWF File Handler component via the /member/uploads_add.php endpoint, where manipulating the mediatype argument enables cross-site scripting. The issue is exploitable remotely and affects an unknown functionality of that file. Mul...

PT-2024-17473 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.116 Description: A problematic vulnerability was found in DedeCMS, affecting an unknown functionality of the file /member/uploads add.php of the component SWF File Handler. The manipulation of the mediatype argument leads ...

RHEL 5 : flash-plugin (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - flash-plugin: multiple code execution issues fixed in APSB17-07 CVE-2017-3003 - Unspecified vulnerability...

CVE-2024-30298 Adobe Animate SWF File Parsing Memory corruption

Animate versions 24.0.2, 23.0.5 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that...

CVE-2024-30298 Adobe Animate SWF File Parsing Memory corruption

Animate versions 24.0.2, 23.0.5 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that...

CVE-2024-20796 Adobe Animation SWF File Parsing Memory Corruption

Animate versions 23.0.4, 24.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...