CVE-2026-95116
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.
Risk Assessment
An attacker can cause application or service crash, leading to system unavailability.
Recommendation
Update libming to the latest version that includes a fix. If not possible, restrict access to applications using libming.
Other vulnerabilities in libming
See all- CVE-2017-7578High
Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file.
- CVE-2016-9831High
A heap-based buffer overflow in the parseSWF_RGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to exploit it via a crafted SWF file.
- CVE-2016-9829High
A heap-based buffer overflow in the parseSWF_DEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to exploit this vulnerability via a crafted SWF file.
- CVE-2026-95125Low risk· EPSS 6%
libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service.
- CVE-2025-66877High
A buffer overflow vulnerability in the dcputchar function in decompile.c in libming 0.4.8. It may lead to crashes or code execution.
- CVE-2025-66869High
In libming 0.4.8, there is a buffer overflow vulnerability in the strcat function in asan_interceptors.cpp.
- CVE-2023-36239High
Version 0.4.7 of the libming library was found to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function in parser.c.
Original NVD description (English source)
An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS