CVE-2018-13066
HIGHlibming 0.4.8 - Denial of Service via Memory Leak in util/parser.c
Title source: llmDescription
There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWF_DEFINEBUTTON2, parseSWF_DEFINEFONT, parseSWF_DEFINEFONTINFO, parseSWF_DEFINELOSSLESS, parseSWF_DEFINESPRITE, parseSWF_DEFINETEXT, parseSWF_DOACTION, parseSWF_FILLSTYLEARRAY, parseSWF_FRAMELABEL, parseSWF_LINESTYLEARRAY, parseSWF_PLACEOBJECT2, or parseSWF_SHAPEWITHSTYLE.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://github.com/libming/libming/issues/146
Scores
CVSS v3
7.5
EPSS
0.0141
EPSS Percentile
69.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-772
Status
published
Products (1)
libming/libming
0.4.8
Published
Jul 02, 2018
Tracked Since
Feb 18, 2026