CVE-2018-8806

Name of the Vulnerable Software and Affected Versions libming version 0.4.8

Description The issue is related to a use-after-free in the decompileArithmeticOp function of decompile.c. This could allow remote attackers to cause a denial-of-service via a crafted swf file.

Recommendations For libming version 0.4.8, consider avoiding the use of the decompileArithmeticOp function until a patch is available. As a temporary workaround, restrict the processing of swf files from untrusted sources to minimize the risk of exploitation.