PT-2025-7602 · Libming · Libming

Xuhxxo · Published 2025-02-20 · Updated 2025-04-17 · CVE-2025-26311

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libming version 0.4.8

Description Multiple memory leaks have been identified in the clip actions parsing functions, specifically parseSWF CLIPACTIONS and parseSWF CLIPACTIONRECORD, in util/parser.c of libming. These leaks allow attackers to cause a denial of service via a crafted SWF file.

Recommendations For libming version 0.4.8, consider disabling the parseSWF CLIPACTIONS and parseSWF CLIPACTIONRECORD functions until a patch is available to prevent potential denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2025-26311

Affected Products

Libming

References · 9

• https://github.com/libming/libming/issues/329 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-26311 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-26311 · Security Note
• https://osv.dev/vulnerability/CVE-2025-26311 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-26311 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-26311 · Vendor Advisory
• https://t.me/cvedetector/18557 · Telegram Post
• https://twitter.com/CVEnew/status/1892627665837867405 · Twitter Post
• https://twitter.com/dailycve/status/1912939113080041917 · Twitter Post