Medium severity6.5OSV Advisory· Published Jan 5, 2018· Updated Jun 17, 2026

CVE-2018-5251

Description

In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Libming/LibmingOSV2 versions
ming-0_3_0, ming-0_3_beta2, ming-0_4_0_beta3, …+ 1 more
- (no CPE)range: ming-0_3_0, ming-0_3_beta2, ming-0_4_0_beta3, …
- (no CPE)range: = 0.4.8

Patches

Vulnerability mechanics

References

github.com/libming/libming/issues/97nvdExploitIssue TrackingThird Party Advisory
lists.debian.org/debian-lts-announce/2018/03/msg00008.htmlnvdThird Party Advisory
security.gentoo.org/glsa/201904-24nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000