CVE-2025-26311

Name of the Vulnerable Software and Affected Versions libming version 0.4.8

Description Multiple memory leaks have been identified in the clip actions parsing functions, specifically parseSWF CLIPACTIONS and parseSWF CLIPACTIONRECORD, in util/parser.c of libming. These leaks allow attackers to cause a denial of service via a crafted SWF file.

Recommendations For libming version 0.4.8, consider disabling the parseSWF CLIPACTIONS and parseSWF CLIPACTIONRECORD functions until a patch is available to prevent potential denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.