VYPR

Libming

by Libming

Source repositories

CVEs (124)

  • CVE-2020-11895CriApr 19, 2020
    risk 0.59cvss 9.1epss 0.02

    Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF() in decompile.c.

  • CVE-2020-11894CriApr 19, 2020
    risk 0.59cvss 9.1epss 0.02

    Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF() in decompile.c.

  • CVE-2019-16705CriSep 23, 2019
    risk 0.59cvss 9.1epss 0.02

    Ming (aka libming) 0.4.8 has an out of bounds read vulnerability in the function OpCode() in the decompile.c file in libutil.a.

  • CVE-2023-36239HigJun 22, 2023
    risk 0.57cvss 8.8epss 0.01

    libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function at parser.c.

  • CVE-2023-31976HigMay 9, 2023
    risk 0.57cvss 8.8epss 0.01

    libming v0.4.8 was discovered to contain a stack buffer overflow via the function makeswf_preprocess at /util/makeswf_utils.c.

  • CVE-2020-6628HigJan 9, 2020
    risk 0.57cvss 8.8epss 0.02

    Ming (aka libming) 0.4.8 has a heap-based buffer over-read in the function decompile_SWITCH() in decompile.c.

  • CVE-2019-9114HigFeb 25, 2019
    risk 0.57cvss 8.8epss 0.01

    Ming (aka libming) 0.4.8 has an out of bounds write vulnerability in the function strcpyext() in the decompile.c file in libutil.a.

  • CVE-2019-9113HigFeb 25, 2019
    risk 0.57cvss 8.8epss 0.01

    Ming (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the decompile.c file in libutil.a.

  • CVE-2019-7582HigFeb 7, 2019
    risk 0.57cvss 8.8epss 0.02

    The readBytes function in util/read.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure.

  • CVE-2019-7581HigFeb 7, 2019
    risk 0.57cvss 8.8epss 0.02

    The parseSWF_ACTIONRECORD function in util/parser.c in libming through 0.4.8 allows remote attackers to have unspecified impact via a crafted swf file that triggers a memory allocation failure, a different vulnerability than CVE-2018-7876.

  • CVE-2018-20429HigDec 24, 2018
    risk 0.57cvss 8.8epss 0.01

    libming 0.4.8 has a NULL pointer dereference in the getName function of the decompile.c file, a different vulnerability than CVE-2018-7872 and CVE-2018-9165.

  • CVE-2018-20428HigDec 24, 2018
    risk 0.57cvss 8.8epss 0.01

    libming 0.4.8 has a NULL pointer dereference in the strlenext function of the decompile.c file, a different vulnerability than CVE-2018-7874.

  • CVE-2018-20427HigDec 24, 2018
    risk 0.57cvss 8.8epss 0.01

    libming 0.4.8 has a NULL pointer dereference in the getInt function of the decompile.c file, a different vulnerability than CVE-2018-9132.

  • CVE-2018-20426HigDec 24, 2018
    risk 0.57cvss 8.8epss 0.01

    libming 0.4.8 has a NULL pointer dereference in the newVar3 function of the decompile.c file, a different vulnerability than CVE-2018-7866.

  • CVE-2018-20425HigDec 24, 2018
    risk 0.57cvss 8.8epss 0.01

    libming 0.4.8 has a NULL pointer dereference in the pushdup function of the decompile.c file.

  • CVE-2018-11226HigMay 17, 2018
    risk 0.57cvss 8.8epss 0.02

    The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified…

  • CVE-2018-11225HigMay 17, 2018
    risk 0.57cvss 8.8epss 0.02

    The dcputs function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified…

  • CVE-2018-11100HigMay 15, 2018
    risk 0.57cvss 8.8epss 0.02

    The decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have…

  • CVE-2018-11095HigMay 15, 2018
    risk 0.57cvss 8.8epss 0.02

    The decompileJUMP function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have…

  • CVE-2018-11017HigMay 13, 2018
    risk 0.57cvss 8.8epss 0.01

    The newVar_N function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified…

Page 1 of 7