CVE-2025-26309: Exposure of Sensitive Information to an Unauthorized Actor

A memory leak has been identified in the parseSWFDEFINESCENEANDFRAMEDATA function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

CVE-2025-26311: Missing Release of Memory after Effective Lifetime

Multiple memory leaks have been identified in the clip actions parsing functions parseSWFCLIPACTIONS and parseSWFCLIPACTIONRECORD in util/parser.c of libming v0.4.8, which allow attackers to cause a denial of service via a crafted SWF file...

CVE-2025-26309

A memory leak has been identified in the parseSWFDEFINESCENEANDFRAMEDATA function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

CVE-2025-26307

A memory leak has been identified in the parseSWFIMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

CVE-2025-26305

A memory leak has been identified in the parseSWFSOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

CVE-2025-26305

The libming library (version v0.4.8 ) is vulnerable to a Denial of Service (DoS) attack due to a memory leak in the parseSWF_SOUNDINFO function located in util/parser.c . An attacker can trigger this vulnerability by providing a crafted SWF file . While the vulnerability is known to exist, some r...

CVE-2025-26305: Improper Clearing of Heap Memory Before Release

A memory leak has been identified in the parseSWFSOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

PT-2025-7596

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description A memory leak has been identified in the parseSWF SOUNDINFO function in util/parser.c, which allows attackers to cause a denial of service via a crafted SWF file. Recommendations For libming version 0.4.8,...

CVE-2025-26305

A memory leak has been identified in the parseSWFSOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file...

CVE-2025-26311

The libming library (version 0.4.8 ) is vulnerable to a Denial of Service (DoS) condition due to multiple memory leaks in the clip actions parsing functions. Specifically, the functions parseSWF_CLIPACTIONS and parseSWF_CLIPACTIONRECORD within util/parser.c fail to perform proper memory deallocat...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in gf_fwrite

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5226932353957888 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x5160000044bc Crash State:...

CVE-2024-12181

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploadsadd.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be...

CVE-2024-12181

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploadsadd.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be...

CVE-2024-12181

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploadsadd.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be...

CVE-2024-12181 DedeCMS SWF File uploads_add.php cross site scripting

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploadsadd.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be...

CVE-2024-12181 DedeCMS SWF File uploads_add.php cross site scripting

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploadsadd.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be...

CVE-2024-12181

CVE-2024-12181 affects DedeCMS 5.7.116; the vulnerability is in the SWF File Handler component via the /member/uploads_add.php endpoint, where manipulating the mediatype argument enables cross-site scripting. The issue is exploitable remotely and affects an unknown functionality of that file. Mul...

PT-2024-17473 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.116 Description: A problematic vulnerability was found in DedeCMS, affecting an unknown functionality of the file /member/uploads add.php of the component SWF File Handler. The manipulation of the mediatype argument leads ...

CVE-2024-12181: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploadsadd.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be...

Adobe Flash Player Incorrect Default Permissions Vulnerability

Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content...