PT-2025-13247

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description A memory leak was discovered in libming via the parseSWF INITACTION function. Recommendations For libming version 0.4.8, consider disabling the parseSWF INITACTION function as a temporary workaround until a...

PT-2025-13250

Name of the Vulnerable Software and Affected Versions libming version 0.48 Description The issue is related to an allocation-size-too-big error in the parseSWF DEFINEBINARYDATA function, which allows attackers to cause a Denial of Service DoS by supplying a crafted SWF file. Recommendations For...

PT-2025-13245

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description A memory leak was discovered in libming via the parseSWF PLACEOBJECT3 function. Recommendations For libming version 0.4.8, consider restricting the use of the parseSWF PLACEOBJECT3 function until a patch is...

PT-2025-13242

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description A memory leak was discovered in libming via the parseSWF ENABLEDEBUGGER2 function. Recommendations For libming version 0.4.8, consider disabling the parseSWF ENABLEDEBUGGER2 function as a temporary workaround...

PT-2025-13248

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description A memory leak was discovered in the parseSWF MORPHLINESTYLES function. Recommendations For libming version 0.4.8, consider disabling the parseSWF MORPHLINESTYLES function as a temporary workaround until a patc...

PT-2025-13255

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description A memory leak was discovered in libming via the parseSWF MORPHFILLSTYLES function. Recommendations For libming version 0.4.8, consider disabling the parseSWF MORPHFILLSTYLES function until a patch is available...

libming information leakage vulnerability

libming is an open source Flash SWF output library written in C by Ming. A security vulnerability exists in libming version 0.4.8, which stems from a memory leak in the parseSWFPLACEOBJECT3 function...

PT-2025-7596

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description A memory leak has been identified in the parseSWF SOUNDINFO function in util/parser.c, which allows attackers to cause a denial of service via a crafted SWF file. Recommendations For libming version 0.4.8,...

PT-2024-20294

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description A memory leak issue was discovered in the parseSWF DEFINEBUTTON function, allowing attackers to cause a denial of service via a crafted SWF file. Recommendations For libming version 0.4.8, consider updating to...

PT-2024-20299 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory leak issue was discovered in the parseSWF TEXTRECORD function, allowing attackers to cause a denial of service via a crafted SWF file. Recommendations: For libming version 0.4.8, consider updating t...

PT-2024-20297 · Libming · Libming

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory leak issue was discovered in the parseSWF GLYPHENTRY function, allowing attackers to cause a denial of service via a crafted SWF file. Recommendations: For libming version 0.4.8, consider updating t...

PT-2023-12144

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description The issue allows a local attacker to execute arbitrary code via the parseSWF IMPORTASSETS function in the parser.c file. This enables the attacker to potentially gain control over the system. Recommendations F...

PT-2022-12179

Name of the Vulnerable Software and Affected Versions libming version 0.4.8 Description The issue is related to a lack of boundary check in the parseSWF DEFINELOSSLESS2 function, located in util/parser.c, which could lead to denial-of-service attacks via a crafted SWF file. Recommendations For...

PT-2019-18656

Name of the Vulnerable Software and Affected Versions libming versions prior to 0.4.8 Description The issue is related to the parseSWF ACTIONRECORD function in util/parser.c, which allows remote attackers to have an unspecified impact via a crafted swf file. This can trigger a memory allocation...

Memory corruption

There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWFDEFINEBUTTON2, parseSWFDEFINEFONT, parseSWFDEFINEFONTINFO, parseSWFDEFINELOSSLESS, parseSWFDEFINESPRITE, parseSWFDEFINETEXT, parseSWFDOACTION, parseSWFFILLSTYLEARRAY, parseSWFFRAMELABEL,...

PT-2018-18303

Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: A memory exhaustion issue was found in the parseSWF ACTIONRECORD function in util/parser.c, allowing remote attackers to cause a denial of service via a crafted file. Recommendations: For libming version...

PT-2017-12191

Name of the Vulnerable Software and Affected Versions Ming version 0.4.8 Description A memory leak was found in the function parseSWF SHAPEWITHSTYLE in util/parser.c, which allows attackers to cause a denial of service via a crafted file. Recommendations For Ming version 0.4.8, at the moment, the...

PT-2017-12189

Name of the Vulnerable Software and Affected Versions Ming version 0.4.8 Description A memory leak issue was discovered in the parseSWF DOACTION function, located in util/parser.c, allowing attackers to cause a denial of service by using a crafted file. Recommendations For Ming version 0.4.8,...

PT-2017-10365

Name of the Vulnerable Software and Affected Versions libming version 0.4.7 Description The issue is related to a heap-based buffer overflow in the parseSWF RGBA function, located in parser.c in the listswf tool. This can be triggered by remote attackers using a crafted SWF file, potentially...

PT-2017-10364

Name of the Vulnerable Software and Affected Versions libming version 0.4.7 Description The issue is related to a heap-based buffer overflow in the parseSWF DEFINEFONT function in parser.c in the listswf tool. This can be exploited by remote attackers using a crafted SWF file, potentially leading...