CVE-2026-95125: Buffer Overflow

Q: What input must an attacker control to trigger the issue?

An attacker needs to provide a crafted SWF file containing a malformed or truncated RECT header that is processed by libming.

Q: What is the expected impact of successful exploitation?

The reported impact is denial of service caused by a heap buffer overflow in r_readc() in src/blocks/fromswf.c.

Q: Which libming releases are identified as affected?

The issue is reported in libming through version 0.4.8. The provided data does not identify a fixed release.

Published Oct 8, 2026

Updated

libming through 0.4.8 contains a heap buffer overflow in rreadc() in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service.

Affected Software

1 affected component

Ming libming<=0.4.8

Event History

Oct 8, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What input must an attacker control to trigger the issue?

An attacker needs to provide a crafted SWF file containing a malformed or truncated RECT header that is processed by libming.

What is the expected impact of successful exploitation?

The reported impact is denial of service caused by a heap buffer overflow in r_readc() in src/blocks/fromswf.c.

Which libming releases are identified as affected?

The issue is reported in libming through version 0.4.8. The provided data does not identify a fixed release.

CVE-2026-95125: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

What input must an attacker control to trigger the issue?

What is the expected impact of successful exploitation?

Which libming releases are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What input must an attacker control to trigger the issue?

What is the expected impact of successful exploitation?

Which libming releases are identified as affected?