CVE-2025-66877
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
A buffer overflow vulnerability in the dcputchar function in decompile.c in libming 0.4.8. It may lead to crashes or code execution.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code or cause crashes in applications using libming.
Recommendation
Update libming to a patched version or avoid processing untrusted files.
Other vulnerabilities in libming
See all- CVE-2017-7578High
Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file.
- CVE-2016-9831High
A heap-based buffer overflow in the parseSWF_RGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to exploit it via a crafted SWF file.
- CVE-2016-9829High
A heap-based buffer overflow in the parseSWF_DEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to exploit this vulnerability via a crafted SWF file.
- CVE-2026-95116High
An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.
- CVE-2026-95125Low risk· EPSS 6%
libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service.
- CVE-2025-66869High
In libming 0.4.8, there is a buffer overflow vulnerability in the strcat function in asan_interceptors.cpp.
- CVE-2023-36239High
Version 0.4.7 of the libming library was found to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function in parser.c.
Original NVD description (English source)
Buffer overflow vulnerability in function dcputchar in decompile.c in libming 0.4.8.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS