Libming vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2025-66877 Buffer overflow vulnerability in function dcputchar in decompile.c in libming 0.4.8.High 7.5 · Dec 29, 2025
• CVE-2025-66869 Buffer overflow vulnerability in function strcat in asan_interceptors.cpp in libming 0.4.8.High 7.5 · Dec 29, 2025
• CVE-2025-29487 An out-of-memory error in the parseABC_STRING_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allocator exhaustion.High 7.5 · Mar 27, 2025
• CVE-2025-29484 An out-of-memory error in the parseABC_NS_SET_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allocator exhaustion.High 7.5 · Mar 27, 2025
• CVE-2025-26305 A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service viaHigh 8.2 · Feb 20, 2025
• CVE-2025-26304 A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.High 8.2 · Feb 20, 2025
• CVE-2024-24148 A memory leak issue discovered in parseSWF_FREECHARACTER in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file.High 7.5 · Feb 28, 2024
• CVE-2023-50628 Buffer Overflow vulnerability in libming version 0.4.8, allows attackers to execute arbitrary code and obtain sensitive information via parser.c component.Critical 9.8 · Dec 20, 2023
• CVE-2023-36239 libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function at parser.c.High 8.8 · Jun 22, 2023
• CVE-2021-31240 An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWF_IMPORTASSETS function in the parser.c file.High 7.8 · May 9, 2023
• CVE-2023-31976 libming v0.4.8 was discovered to contain a stack buffer overflow via the function makeswf_preprocess at /util/makeswf_utils.c.High 8.8 · May 9, 2023
• CVE-2022-44232 libming 0.4.8 0.4.8 is vulnerable to Buffer Overflow.High 7.5 · Apr 26, 2023
• CVE-2020-11895 Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF() in decompile.c.Critical 9.1 · Apr 19, 2020
• CVE-2020-11894 Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF() in decompile.c.Critical 9.1 · Apr 19, 2020
• CVE-2020-6628 Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c.High 8.8 · Jan 8, 2020
• CVE-2019-16705 Ming (aka libming) 0.4.8 has an out of bounds read vulnerability in the function OpCode() in the decompile.c file in libutil.a.Critical 9.1 · Sep 23, 2019
• CVE-2019-12981 Ming (aka libming) 0.4.8 has an "fill overflow" vulnerability in the function SWFShape_setLeftFillStyle in blocks/shape.c.High 8.8 · Jun 26, 2019
• CVE-2019-9114 Ming (aka libming) 0.4.8 has an out of bounds write vulnerability in the function strcpyext() in the decompile.c file in libutil.a.High 8.8 · Feb 24, 2019
• CVE-2019-9113 Ming (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the decompile.c file in libutil.a.High 8.8 · Feb 24, 2019
• CVE-2019-7582 The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory High 8.8 · Feb 7, 2019
• CVE-2019-7581 The parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that trigHigh 8.8 · Feb 7, 2019
• CVE-2018-20429 libming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file, a different vulnerability than CVE-2018-7872 and CVE-2018-9165.High 8.8 · Dec 24, 2018
• CVE-2018-20428 libming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file, a different vulnerability than CVE-2018-7874.High 8.8 · Dec 24, 2018
• CVE-2018-20427 libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file, a different vulnerability than CVE-2018-9132.High 8.8 · Dec 24, 2018
• CVE-2018-20426 libming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file, a different vulnerability than CVE-2018-7866.High 8.8 · Dec 24, 2018