CVE-2025-26304

Feb. 21, 2025, 9:15 p.m.

8.2
High

Description

A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.

Product(s) Impacted

Product Versions
libming
  • ['0.4.8']

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-244
Improper Clearing of Heap Memory Before Release ('Heap Inspection')
Using realloc() to resize buffers that store sensitive information can leave the sensitive information exposed to attack, because it is not removed from memory.

References

https://github.com/libming/libming/issues/323

Tags

cve@mitre.org
2025-02-20
CVE-2025-26304
CWE-244

CVSS Score

8.2 / 10

CVSS Data - 3.1

  • Attack Vector: NETWORK
  • Attack Complexity: LOW
  • Privileges Required: NONE
  • Scope: UNCHANGED
  • Confidentiality Impact: HIGH
  • Integrity Impact: LOW
  • Availability Impact: NONE

    • CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

    View Vector String

Timeline

Published: Feb. 20, 2025, 5:15 p.m.
Last Modified: Feb. 21, 2025, 9:15 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.