CVE-2025-26309

Name of the Vulnerable Software and Affected Versions libming version 0.4.8

Description A memory leak has been identified in the parseSWF DEFINESCENEANDFRAMEDATA function in util/parser.c, which allows attackers to cause a denial of service via a crafted SWF file.

Recommendations For libming version 0.4.8, consider disabling the parseSWF DEFINESCENEANDFRAMEDATA function as a temporary workaround until a patch is available. Restrict access to crafted SWF files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.