libming vulnerabilities and fixes

Recent CVEs affecting libming, with upgrade or downgrade steps. 24 tracked.

libming has 24 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-29. Highest priority: CVE-2025-26305 (score 47/100).

• CVE-2025-66869 HIGH 7.5 DOWNGRADE Buffer overflow vulnerability in function strcat in asan_interceptors.cpp in libming 0.4.8.
• CVE-2025-66877 HIGH 7.5 DOWNGRADE Buffer overflow vulnerability in function dcputchar in decompile.c in libming 0.4.8.
• CVE-2025-29497 MEDIUM 6.5 DOWNGRADE libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHFILLSTYLES function.
• CVE-2025-29496 MEDIUM 6.5 DOWNGRADE libming v0.4.8 was discovered to contain a segmentation fault via the decompileDUPLICATECLIP function
• CVE-2025-29494 MEDIUM 6.5 DOWNGRADE libming v0.4.8 was discovered to contain a segmentation fault via the decompileGETMEMBER function
• CVE-2025-29493 MEDIUM 6.5 DOWNGRADE libming v0.4.8 was discovered to contain a segmentation fault via the decompileGETPROPERTY function
• CVE-2025-29492 MEDIUM 6.5 DOWNGRADE libming v0.4.8 was discovered to contain a segmentation fault via the decompileSETVARIABLE function.
• CVE-2025-29491 MEDIUM 6.5 DOWNGRADE An allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of libming v0.48 allows attackers t
• CVE-2025-29490 MEDIUM 6.5 DOWNGRADE libming v0.4.8 was discovered to contain a segmentation fault via the decompileCALLMETHOD function
• CVE-2025-29489 MEDIUM 6.5 DOWNGRADE libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHLINESTYLES function.
• CVE-2025-29488 MEDIUM 6.5 DOWNGRADE libming v0.4.8 was discovered to contain a memory leak via the parseSWF_INITACTION function.
• CVE-2025-29487 HIGH 7.5 DOWNGRADE An out-of-memory error in the parseABC_STRING_INFO function of libming v0.4.8 allows attackers to cause a Deni
• CVE-2025-29486 MEDIUM 6.5 DOWNGRADE libming v0.4.8 was discovered to contain a memory leak via the parseSWF_PLACEOBJECT3 function.
• CVE-2025-29485 MEDIUM 6.5 DOWNGRADE libming v0.4.8 was discovered to contain a segmentation fault via the decompileRETURN function
• CVE-2025-29484 HIGH 7.5 DOWNGRADE An out-of-memory error in the parseABC_NS_SET_INFO function of libming v0.4.8 allows attackers to cause a Deni
• CVE-2025-29483 MEDIUM 6.5 DOWNGRADE libming v0.4.8 was discovered to contain a memory leak via the parseSWF_ENABLEDEBUGGER2 function.
• CVE-2025-26311 MEDIUM 6.5 DOWNGRADE Multiple memory leaks have been identified in the clip actions parsing functions (parseSWF_CLIPACTIONS and par
• CVE-2025-26310 MEDIUM 6.5 DOWNGRADE Multiple memory leaks have been identified in the ABC file parsing functions (parseABC_CONSTANT_POOL and `pars
• CVE-2025-26309 MEDIUM 6.5 DOWNGRADE A memory leak has been identified in the parseSWF_DEFINESCENEANDFRAMEDATA function in util/parser.c of libming
• CVE-2025-26308 MEDIUM 6.5 DOWNGRADE A memory leak has been identified in the parseSWF_FILTERLIST function in util/parser.c of libming v0.4.8, whic
• CVE-2025-26307 MEDIUM 6.5 DOWNGRADE A memory leak has been identified in the parseSWF_IMPORTASSETS2 function in util/parser.c of libming v0.4.8, w
• CVE-2025-26306 MEDIUM 6.5 DOWNGRADE A memory leak has been identified in the readSizedString function in util/read.c of libming v0.4.8, which allo
• CVE-2025-26305 HIGH 8.2 DOWNGRADE A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which
• CVE-2025-26304 HIGH 8.2 DOWNGRADE A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.

FAQ

How do I fix libming vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is libming being exploited right now?

None of the tracked libming CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which libming CVE should I patch first?

CVE-2025-26305 currently ranks highest (47/100): A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which.

RSS feed for libming · ← Back to latest CVEs