CVE-2018-13066

HIGH

Libming - Resource Leak

Title source: rule

Description

There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWF_DEFINEBUTTON2, parseSWF_DEFINEFONT, parseSWF_DEFINEFONTINFO, parseSWF_DEFINELOSSLESS, parseSWF_DEFINESPRITE, parseSWF_DEFINETEXT, parseSWF_DOACTION, parseSWF_FILLSTYLEARRAY, parseSWF_FRAMELABEL, parseSWF_LINESTYLEARRAY, parseSWF_PLACEOBJECT2, or parseSWF_SHAPEWITHSTYLE.

References (1)

[Vendor Advisory] https://github.com/libming/libming/issues/146

Scores

CVSS v3 7.5

EPSS 0.0038

EPSS Percentile 59.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-772

Status published

Affected Products (1)

libming/libming

Timeline

Published Jul 02, 2018

Tracked Since Feb 18, 2026