Skip to content

Libming · weakness class

Denial of Service

26 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 26 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure.CVE-2019-7582Libming · 2.5% likely

    CWE-770

  2. The parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory alloc…CVE-2019-7581Libming · 2.5% likely

    CWE-770

  3. In libming 0.4.8, a memory exhaustion vulnerability was found in the function parseSWF_ACTIONRECORD in util/parser.c, which allows remote attackers to cause a denial of service vi…CVE-2018-7876Libming · 2.0% likely

    CWE-400

  4. The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file.CVE-2016-9265Libming · 1.6% likely

    CWE-369

  5. There is a memory leak triggered in the function dcinit of util/decompile.c in libming 0.4.8, which will lead to a denial of service attack.CVE-2018-7869Libming · 1.5% likely

    CWE-772

  6. In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWF_DEFINEBITSJPEG2. Remote attackers could le…CVE-2018-13251Libming · 1.4% likely

    CWE-400

  7. There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWF_DEFINEBUTTON2, parseSWF_DEFINEFONT, parseSWF_DEFINEFONTINFO, parseSWF…CVE-2018-13066Libming · 1.4% likely

    CWE-772

  8. A memory leak vulnerability was found in the function parseSWF_DOACTION in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.CVE-2017-11703Libming · 1.4% likely

    CWE-772

  9. In libming 0.4.8, a memory exhaustion vulnerability exist in the function cws2fws in util/main.c. Remote attackers could launch denial of service attacks by submitting a crafted S…CVE-2021-44590Libming · 1.3% likely

    CWE-770

  10. A memory leak was found in the function parseSWF_SHAPEWITHSTYLE in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.CVE-2017-11705Libming · 1.2% likely

    CWE-772

  11. In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check that would lead to denial-of-service attacks via a crafted SWF file.CVE-2021-44591Libming · 1.1% likely

    CWE-770

  12. A memory leak issue discovered in parseSWF_GLYPHENTRY in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file.CVE-2024-24149Libming · CVSS 6.5 · 0.8% likely

    CWE-401

  13. A memory leak issue discovered in parseSWF_TEXTRECORD in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file.CVE-2024-24150Libming · CVSS 6.5 · 0.8% likely

    CWE-401

  14. A memory leak issue discovered in parseSWF_FILLSTYLEARRAY in libming v0.4.8 allows attackers to cause s denial of service via a crafted SWF file.CVE-2024-24147Libming · CVSS 6.5 · 0.7% likely

    CWE-401

  15. A memory leak issue discovered in parseSWF_FREECHARACTER in libming v0.4.8 allows attackers to cause a denial of service via a crafted SWF file.CVE-2024-24148Libming · CVSS 7.5 · 0.6% likely

    CWE-401

  16. libming 0.4.8 contains a memory leak vulnerability in /libming/src/actioncompiler/listaction.c.CVE-2024-25770Libming · CVSS 4.3 · 0.6% likely

    CWE-401

  17. An out-of-memory error in the parseABC_STRING_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allocator exhaustion.CVE-2025-29487Libming · CVSS 7.5 · 0.5% likely

    CWE-400

  18. An out-of-memory error in the parseABC_NS_SET_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allocator exhaustion.CVE-2025-29484Libming · CVSS 7.5 · 0.5% likely

    CWE-400

  19. Multiple memory leaks have been identified in the clip actions parsing functions (parseSWF_CLIPACTIONS and parseSWF_CLIPACTIONRECORD) in util/parser.c of libming v0.4.8, which all…CVE-2025-26311Libming · CVSS 6.5 · 0.4% likely

    CWE-401

  20. A memory leak has been identified in the parseSWF_FILTERLIST function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF fil…CVE-2025-26308Libming · CVSS 6.5 · 0.4% likely

    CWE-401

  21. A memory leak has been identified in the parseSWF_IMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF…CVE-2025-26307Libming · CVSS 6.5 · 0.4% likely

    CWE-401

  22. A memory leak has been identified in the readSizedString function in util/read.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted file.CVE-2025-26306Libming · CVSS 6.5 · 0.4% likely

    CWE-401

  23. An allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of libming v0.48 allows attackers to cause a Denial of Service (DoS) via supplying a crafted SWF file.CVE-2025-29491Libming · CVSS 6.5 · 0.3% likely

    CWE-789

  24. libming v0.4.8 was discovered to contain a segmentation fault via the decompileCALLMETHOD function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a cr…CVE-2025-29490Libming · CVSS 6.5 · 0.3% likely

    CWE-400

  25. libming v0.4.8 was discovered to contain a memory leak via the parseSWF_ENABLEDEBUGGER2 function.CVE-2025-29483Libming · CVSS 6.5 · 0.3% likely

    CWE-401

  26. An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWF_IMPORTASSETS function in the parser.c file.CVE-2021-31240Libming · CVSS 7.8 · 0.3% likely

    CWE-401

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.