CVE-2025-66877 | High | 7.5 | 2025-12-29 | Buffer overflow vulnerability in function dcputchar in decompile.c in libming 0.4.8. |
CVE-2025-66869 | High | 7.5 | 2025-12-29 | Buffer overflow vulnerability in function strcat in asan_interceptors.cpp in libming 0.4.8. |
CVE-2025-29497 | Medium | 6.5 | 2025-03-27 | libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHFILLSTYLES function. |
CVE-2025-29496 | Medium | 6.5 | 2025-03-27 | libming v0.4.8 was discovered to contain a segmentation fault via the decompileDUPLICATECLIP function. This vulnerability allows attackers to cause a Denial of… |
CVE-2025-29494 | Medium | 6.5 | 2025-03-27 | libming v0.4.8 was discovered to contain a segmentation fault via the decompileGETMEMBER function. This vulnerability allows attackers to cause a Denial of Ser… |
CVE-2025-29493 | Medium | 6.5 | 2025-03-27 | libming v0.4.8 was discovered to contain a segmentation fault via the decompileGETPROPERTY function. This vulnerability allows attackers to cause a Denial of S… |
CVE-2025-29492 | Medium | 6.5 | 2025-03-27 | libming v0.4.8 was discovered to contain a segmentation fault via the decompileSETVARIABLE function. |
CVE-2025-29491 | Medium | 6.5 | 2025-03-27 | An allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of libming v0.48 allows attackers to cause a Denial of Service (DoS) via supplying a… |
CVE-2025-29490 | Medium | 6.5 | 2025-03-27 | libming v0.4.8 was discovered to contain a segmentation fault via the decompileCALLMETHOD function. This vulnerability allows attackers to cause a Denial of Se… |
CVE-2025-29489 | Medium | 6.5 | 2025-03-27 | libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHLINESTYLES function. |
CVE-2025-29488 | Medium | 6.5 | 2025-03-27 | libming v0.4.8 was discovered to contain a memory leak via the parseSWF_INITACTION function. |
CVE-2025-29487 | High | 7.5 | 2025-03-27 | An out-of-memory error in the parseABC_STRING_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allocator exhaustion. |
CVE-2025-29486 | Medium | 6.5 | 2025-03-27 | libming v0.4.8 was discovered to contain a memory leak via the parseSWF_PLACEOBJECT3 function. |
CVE-2025-29485 | Medium | 6.5 | 2025-03-27 | libming v0.4.8 was discovered to contain a segmentation fault via the decompileRETURN function. This vulnerability allows attackers to cause a Denial of Servic… |
CVE-2025-29484 | High | 7.5 | 2025-03-27 | An out-of-memory error in the parseABC_NS_SET_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allocator exhaustion. |
CVE-2025-29483 | Medium | 6.5 | 2025-03-27 | libming v0.4.8 was discovered to contain a memory leak via the parseSWF_ENABLEDEBUGGER2 function. |
CVE-2025-26311 | Medium | 6.5 | 2025-02-20 | Multiple memory leaks have been identified in the clip actions parsing functions (parseSWF_CLIPACTIONS and parseSWF_CLIPACTIONRECORD) in util/parser.c of libmi… |
CVE-2025-26310 | Medium | 6.5 | 2025-02-20 | Multiple memory leaks have been identified in the ABC file parsing functions (parseABC_CONSTANT_POOL and `parseABC_FILE) in util/parser.c of libming v0.4.8, wh… |
CVE-2025-26309 | Medium | 6.5 | 2025-02-20 | A memory leak has been identified in the parseSWF_DEFINESCENEANDFRAMEDATA function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial… |
CVE-2025-26308 | Medium | 6.5 | 2025-02-20 | A memory leak has been identified in the parseSWF_FILTERLIST function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service v… |
CVE-2025-26307 | Medium | 6.5 | 2025-02-20 | A memory leak has been identified in the parseSWF_IMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of servic… |
CVE-2025-26306 | Medium | 6.5 | 2025-02-20 | A memory leak has been identified in the readSizedString function in util/read.c of libming v0.4.8, which allows attackers to cause a denial of service via a c… |
CVE-2025-26305 | High | 8.2 | 2025-02-20 | A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service vi… |
CVE-2025-26304 | High | 8.2 | 2025-02-20 | A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8. |
CVE-2024-24150 | Medium | 6.5 | 2024-02-29 | A memory leak issue discovered in parseSWF_TEXTRECORD in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file. |
CVE-2024-24149 | Medium | 6.5 | 2024-02-29 | A memory leak issue discovered in parseSWF_GLYPHENTRY in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file. |
CVE-2024-24147 | Medium | 6.5 | 2024-02-29 | A memory leak issue discovered in parseSWF_FILLSTYLEARRAY in libming v0.4.8 allows attackers to cause s denial of service via a crafted SWF file. |
CVE-2024-24146 | Medium | 6.5 | 2024-02-29 | A memory leak issue discovered in parseSWF_DEFINEBUTTON in libming v0.4.8 allows attackers to cause s denial of service via a crafted SWF file. |
CVE-2024-24148 | High | 7.5 | 2024-02-28 | A memory leak issue discovered in parseSWF_FREECHARACTER in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file. |
CVE-2024-25770 | Medium | 4.3 | 2024-02-26 | libming 0.4.8 contains a memory leak vulnerability in /libming/src/actioncompiler/listaction.c. |
CVE-2023-50628 | Critical | 9.8 | 2023-12-20 | Buffer Overflow vulnerability in libming version 0.4.8, allows attackers to execute arbitrary code and obtain sensitive information via parser.c component. |
CVE-2023-40781 | Medium | 6.5 | 2023-08-28 | Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a denial of service via a crafted .swf file to the makeswf function. |
CVE-2023-36239 | High | 8.8 | 2023-06-22 | libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function at parser.c. |
CVE-2023-30085 | Medium | 5.5 | 2023-05-09 | Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the cws2fws function in util/decompile… |
CVE-2023-30084 | Medium | 5.5 | 2023-05-09 | An issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the stackVal function in util/decompile.c. |
CVE-2023-30083 | Medium | 5.5 | 2023-05-09 | Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the newVar_N in util/decompile.c. |
CVE-2021-31240 | High | 7.8 | 2023-05-09 | An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWF_IMPORTASSETS function in the parser.c file. |
CVE-2023-31976 | High | 8.8 | 2023-05-09 | libming v0.4.8 was discovered to contain a stack buffer overflow via the function makeswf_preprocess at /util/makeswf_utils.c. |
CVE-2022-44232 | High | 7.5 | 2023-04-26 | libming 0.4.8 0.4.8 is vulnerable to Buffer Overflow. In getInt() in decompile.c unknown type may lead to denial of service. This is a different vulnerability… |
CVE-2021-34342 | Medium | 6.5 | 2022-03-10 | Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c which causes a huge information leak. |
CVE-2021-34341 | Medium | 6.5 | 2022-03-10 | Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF() in the decompile.c file that causes a direct segmentation fault and leads to d… |
CVE-2021-34340 | Medium | 6.5 | 2022-03-10 | Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in decompiler.c file that causes a direct segmentation fault and leads… |
CVE-2021-34339 | Medium | 6.5 | 2022-03-10 | Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c file that causes a direct segmentation fault and leads to denia… |
CVE-2021-34338 | Medium | 6.5 | 2022-03-10 | Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c file that causes a direct segmentation fault and leads to deni… |
CVE-2021-44591 | Medium | 6.5 | 2022-01-06 | In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check that would lead to denial-of-service attacks via a crafted SWF… |
CVE-2021-44590 | Medium | 6.5 | 2022-01-06 | In libming 0.4.8, a memory exhaustion vulnerability exist in the function cws2fws in util/main.c. Remote attackers could launch denial of service attacks by su… |
CVE-2020-11895 | Critical | 9.1 | 2020-04-19 | Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF() in decompile.c. |
CVE-2020-11894 | Critical | 9.1 | 2020-04-19 | Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF() in decompile.c. |
CVE-2020-6629 | Medium | 6.5 | 2020-01-09 | Ming (aka libming) 0.4.8 has z NULL pointer dereference in the function decompileGETURL2() in decompile.c. |
CVE-2020-6628 | High | 8.8 | 2020-01-09 | Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c. |
CVE-2019-16705 | Critical | 9.1 | 2019-09-23 | Ming (aka libming) 0.4.8 has an out of bounds read vulnerability in the function OpCode() in the decompile.c file in libutil.a. |
CVE-2019-12982 | Medium | 6.5 | 2019-06-26 | Ming (aka libming) 0.4.8 has a heap buffer overflow and underflow in the decompileCAST function in util/decompile.c in libutil.a. Remote attackers could levera… |
CVE-2019-12981 | High | 8.8 | 2019-06-26 | Ming (aka libming) 0.4.8 has an "fill overflow" vulnerability in the function SWFShape_setLeftFillStyle in blocks/shape.c. |
CVE-2019-12980 | Medium | 6.5 | 2019-06-26 | In Ming (aka libming) 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the SWFInput_readSBits function in blocks/input.c. Remote a… |
CVE-2019-9114 | High | 8.8 | 2019-02-25 | Ming (aka libming) 0.4.8 has an out of bounds write vulnerability in the function strcpyext() in the decompile.c file in libutil.a. |
CVE-2019-9113 | High | 8.8 | 2019-02-25 | Ming (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the decompile.c file in libutil.a. |
CVE-2019-7582 | High | 8.8 | 2019-02-07 | The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory… |
CVE-2019-7581 | High | 8.8 | 2019-02-07 | The parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that tri… |
CVE-2019-3572 | Medium | 6.5 | 2019-01-02 | An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-lin… |
CVE-2018-20591 | Medium | 6.5 | 2018-12-30 | A heap-based buffer over-read was discovered in decompileJUMP function in util/decompile.c of libming v0.4.8. A crafted input can cause segmentation faults, le… |
CVE-2018-20429 | High | 8.8 | 2018-12-24 | libming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file, a different vulnerability than CVE-2018-7872 and CVE-2018-9165. |
CVE-2018-20428 | High | 8.8 | 2018-12-24 | libming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file, a different vulnerability than CVE-2018-7874. |
CVE-2018-20427 | High | 8.8 | 2018-12-24 | libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file, a different vulnerability than CVE-2018-9132. |
CVE-2018-20426 | High | 8.8 | 2018-12-24 | libming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file, a different vulnerability than CVE-2018-7866. |
CVE-2018-20425 | High | 8.8 | 2018-12-24 | libming 0.4.8 has a NULL pointer dereference in the pushdup function of the decompile.c file. |
CVE-2018-15871 | Medium | 6.5 | 2018-08-25 | An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. The vulnerability causes a se… |
CVE-2018-15870 | Medium | 6.5 | 2018-08-25 | An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault… |
CVE-2018-13251 | Medium | 6.5 | 2018-07-05 | In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWF_DEFINEBITSJPEG2. Remot… |
CVE-2018-13250 | Medium | 6.5 | 2018-07-05 | libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could levera… |
CVE-2018-13066 | High | 7.5 | 2018-07-02 | There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWF_DEFINEBUTTON2, parseSWF_DEFINEFONT, parseSWF_DEFI… |
CVE-2018-11226 | High | 8.8 | 2018-05-17 | The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allo… |
CVE-2018-11225 | High | 8.8 | 2018-05-17 | The dcputs function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows… |
CVE-2018-11100 | High | 8.8 | 2018-05-15 | The decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, w… |
CVE-2018-11095 | High | 8.8 | 2018-05-15 | The decompileJUMP function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which… |
CVE-2018-11017 | High | 8.8 | 2018-05-13 | The newVar_N function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allow… |
CVE-2018-9165 | Medium | 6.5 | 2018-04-01 | The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is a… |
CVE-2018-9132 | Medium | 6.5 | 2018-03-30 | libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file. Remote attackers could leverage this vulnerability to cause a deni… |
CVE-2018-9009 | High | 8.8 | 2018-03-25 | In libming 0.4.8, there is a use-after-free in the decompileJUMP function of the decompile.c file. |
CVE-2018-8964 | Medium | 6.5 | 2018-03-23 | In libming 0.4.8, the decompileDELETE function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of ser… |
CVE-2018-8963 | Medium | 6.5 | 2018-03-23 | In libming 0.4.8, the decompileGETVARIABLE function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial o… |
CVE-2018-8962 | Medium | 6.5 | 2018-03-23 | In libming 0.4.8, the decompileSingleArgBuiltInFunctionCall function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to… |
CVE-2018-8961 | Medium | 6.5 | 2018-03-23 | In libming 0.4.8, the decompilePUSHPARAM function of decompile.c has a use-after-free. Remote attackers could leverage this vulnerability to cause a denial of… |
CVE-2018-8807 | Medium | 6.5 | 2018-03-20 | In libming 0.4.8, these is a use-after-free in the function decompileCALLFUNCTION of decompile.c. Remote attackers could leverage this vulnerability to cause a… |
CVE-2018-8806 | Medium | 6.5 | 2018-03-20 | In libming 0.4.8, there is a use-after-free in the decompileArithmeticOp function of decompile.c. Remote attackers could use this vulnerability to cause a deni… |
CVE-2018-7877 | Medium | 6.5 | 2018-03-08 | There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for DOUBLE data. A Crafted input will lead to a denial of… |
CVE-2018-7876 | Medium | 6.5 | 2018-03-08 | In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c, which allows remote attackers to cause a… |
CVE-2018-7875 | Medium | 6.5 | 2018-03-08 | There is a heap-based buffer over-read in the getString function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial… |
CVE-2018-7874 | Medium | 6.5 | 2018-03-08 | An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and appli… |
CVE-2018-7873 | Medium | 6.5 | 2018-03-08 | There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of… |
CVE-2018-7872 | Medium | 6.5 | 2018-03-08 | An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation faul… |
CVE-2018-7871 | High | 8.8 | 2018-03-08 | There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial… |
CVE-2018-7870 | Medium | 6.5 | 2018-03-08 | An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmenta… |
CVE-2018-7869 | High | 7.5 | 2018-03-08 | There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack. |
CVE-2018-7868 | Medium | 6.5 | 2018-03-08 | There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial o… |
CVE-2018-7867 | Medium | 6.5 | 2018-03-08 | There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead… |
CVE-2018-7866 | Medium | 6.5 | 2018-03-08 | A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash… |
CVE-2018-6359 | High | 8.8 | 2018-01-27 | The decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service… |
CVE-2018-6358 | High | 8.8 | 2018-01-27 | The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a den… |
CVE-2018-6315 | High | 8.8 | 2018-01-25 | The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which… |
CVE-2018-5294 | Medium | 6.5 | 2018-01-08 | In libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the readUInt32 function (util/read.c). Remote attackers could leverage… |