CVE-2021-44591

Published: Jan 6, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check that would lead to denial-of-service attacks via a crafted SWF file.

Affected (1)

Products: Libming: Libming

Libming

1 product

Libming

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Libming Libming	Version 0.4.8

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (4)

https://github.com/libming/libming

Source: cve@mitre.org

Third Party Advisory

https://github.com/libming/libming/issues/235

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/libming/libming

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://github.com/libming/libming/issues/235

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.