CVE-2026-95125
Low risk· EPSS 6%Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service.
Risk Assessment
Applications processing SWF files with libming can be forced to crash, leading to denial of service. The risk is particularly relevant in systems processing untrusted SWF files.
Recommendation
Restrict processing of untrusted SWF files by libming or update the library to a version containing the fix. Consider validating SWF files before processing them.
Other vulnerabilities in libming
See all- CVE-2017-7578High
Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file.
- CVE-2016-9831High
A heap-based buffer overflow in the parseSWF_RGBA function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to exploit it via a crafted SWF file.
- CVE-2016-9829High
A heap-based buffer overflow in the parseSWF_DEFINEFONT function in parser.c in the listswf tool in libming 0.4.7 allows remote attackers to exploit this vulnerability via a crafted SWF file.
- CVE-2026-95116High
An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.
- CVE-2025-66877High
A buffer overflow vulnerability in the dcputchar function in decompile.c in libming 0.4.8. It may lead to crashes or code execution.
- CVE-2025-66869High
In libming 0.4.8, there is a buffer overflow vulnerability in the strcat function in asan_interceptors.cpp.
- CVE-2023-36239High
Version 0.4.7 of the libming library was found to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function in parser.c.
Original NVD description (English source)
libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS