CVE-2018-7866

A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7871

CVE-2018-7871 corresponds to a heap-based buffer over-read in libming 0.4.8. Specifically, the getName function in util/decompile.c handles CONSTANT16 data and, under crafted input, can cause a denial of service (and potentially other impacts) due to memory over-reads. The connected advisories co...

CVE-2018-7872

CVE-2018-7872 affects libming 0.4.8, where an invalid memory address dereference in getName for CONSTANT16 data causes a segmentation fault and application crash, leading to denial of service. Connected advisories (Mageia MGASA-2019-0137 and Fedora/Nessus OpenVAS entries) confirm this as part of ...

CVE-2018-7873

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack...

CVE-2018-7877

There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a denial of service attack...

CVE-2018-7869

CVE-2018-7869 concerns libming 0.4.8, with a memory leak in the function dcinit (util/decompile.c) that leads to a denial of service. Documents consistently identify the affected component as libming 0.4.8 and the leakage in dcinit; no explicit exploitation details or patches are provided in the ...

CVE-2018-7876

CVE-2018-7876 is a memory exhaustion vulnerability in libming 0.4.8. The issue is in parseSWF_ACTIONRECORD (util/parser.c) and can cause a denial of service via a crafted SWF file. Connected documents confirm libming 0.4.8 is affected and that multiple advisories (Fedora/Mageia) reference fixes/p...

CVE-2018-7876

In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWFACTIONRECORD in util/parser.c, which allows remote attackers to cause a denial of service via a crafted file...

CVE-2018-7870

An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7868

The CVE-2018-7868 issue is a heap-based buffer over-read in libming 0.4.8, specifically in util/decompile.c:getName for CONSTANT8 data, leading to denial of service. Multiple connected sources corroborate this vulnerability and references to libming up to 0.4.8 (and related CVEs) being addressed ...

CVE-2018-7872

An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7867

CVE-2018-7867 corresponds to a heap-based buffer overflow in libming 0.4.8, specifically in the getString function (util/decompile.c) during a RegisterNumber sprintf, leading to denial of service when given crafted input. The connected sources confirm this as part of a broader set of fixes for mi...

CVE-2018-7875

The CVE-2018-7875 issue affects libming 0.4.8, specifically the getString function in util/decompile.c when processing CONSTANT8 data. A crafted input can cause a heap-based buffer over-read and denial of service. Public advisories (e.g., Fedora update FEDORA-2019-4fdf19459d and Mageia MGASA-2019...

CVE-2018-7873

CVE-2018-7873 is a heap-based buffer overflow in libming 0.4.8 (getString in util/decompile.c for INTEGER data) that can cause denial of service. Public advisories confirm fixes were applied in later libming updates (e.g., ming 0.4.9) across Fedora, Mageia, and OSV records; affected packages were...

CVE-2018-7868: Out-of-bounds Read

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack...

CVE-2018-7871: Out-of-bounds Read

There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial of service or possibly unspecified other impact...

CVE-2018-7869: Missing Release of Resource after Effective Lifetime

There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack...

CVE-2018-7874: Improper Restriction of Operations within the Bounds of a Memory Buffer

An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7866: NULL Pointer Dereference

A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2018-7875: Out-of-bounds Read

There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack...