CVE-2021-44591

Name of the Vulnerable Software and Affected Versions libming version 0.4.8

Description The issue is related to a lack of boundary check in the parseSWF DEFINELOSSLESS2 function, located in util/parser.c, which could lead to denial-of-service attacks via a crafted SWF file.

Recommendations For libming version 0.4.8, consider applying a patch or fix that adds a boundary check to the parseSWF DEFINELOSSLESS2 function to prevent denial-of-service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.