← Back

Libming

libming

Vendor: Libming • 107 CVEs

CVEs (107)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Mar 8, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An invalid memory address dereference was discovered in strlenext in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Mar 8, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 for INTEGER data. A Crafted input will lead to a denial of service attack.
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Mar 8, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An invalid memory address dereference was discovered in the function getName in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Mar 8, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT16 data. A crafted input will lead to a denial of service or possibly unspecified other impact.
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Mar 8, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of se...Show more
An invalid memory address dereference was discovered in getString in util/decompile.c in libming 0.4.8 for CONSTANT16 data. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.Show less
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Mar 8, 2018
N/A· v4
7.5 HIGH· v3
4.3 MEDIUM· v2
There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack.
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Mar 8, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is a heap-based buffer over-read in the getName function of util/decompile.c in libming 0.4.8 for CONSTANT8 data. A Crafted input will lead to a denial of service attack.
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Mar 8, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
There is a heap-based buffer overflow in the getString function of util/decompile.c in libming 0.4.8 during a RegisterNumber sprintf. A Crafted input will lead to a denial of service attack.
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Mar 8, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A NULL pointer dereference was discovered in newVar3 in util/decompile.c in libming 0.4.8. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Jan 27, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after-free, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file.
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Jan 27, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB...Show more
The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, which may allow attackers to cause a denial of service or unspecified other impact via a crafted FDB file.Show less
2Debian
Libming
2Debian Linux
Libming
Jun 17, 2026
Jan 25, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which may allow attackers to cause a denial of service or unspecifi...Show more
The outputSWF_TEXT_RECORD function (util/outputscript.c) in libming through 0.4.8 is vulnerable to an integer overflow and resultant out-of-bounds read, which may allow attackers to cause a denial of service or unspecified other impact via a crafted SWF file.Show less
2Debian
Libming
2Debian Linux
Libming
Nov 21, 2024
Jan 8, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the readUInt32 function (util/read.c). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafte...Show more
In libming 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the readUInt32 function (util/read.c). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.Show less
2Debian
Libming
2Debian Linux
Libming
Nov 21, 2024
Jan 5, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service...Show more
In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file.Show less
1Libming
1Libming
May 13, 2026
Nov 20, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a denial of service via a crafted file, a different vulnerability...Show more
The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a denial of service via a crafted file, a different vulnerability than CVE-2016-9264.Show less
1Libming
1Libming
May 13, 2026
Nov 18, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service via a crafted swf file.
2Debian
Libming
2Debian Linux
Libming
May 13, 2026
Jun 28, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
util/outputtxt.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack.
2Debian
Libming
2Debian Linux
Libming
May 13, 2026
Jun 28, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a remote denial of service (NULL pointer dereference) attack against parser.c.
1Libming
1Libming
May 13, 2026
May 31, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote attackers to cause a denial of service via a large file that is mishandled by listswf, listaction, etc. This occurs because of an...Show more
The readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote attackers to cause a denial of service via a large file that is mishandled by listswf, listaction, etc. This occurs because of an integer overflow that leads to a memory allocation error.Show less
1Libming
1Libming
May 13, 2026
Apr 7, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file. NOTE: th...Show more
Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831.Show less