CVE-2019-12980

In Ming (aka libming) 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the SWFInput_readSBits function in blocks/input.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2019-06-26

Last modified

2024-08-04

Weaknesses

CWE-190

Affected products

• Libming (Libming)

References

• https://github.com/libming/libming/commit/a009a38dce1d9316cad1ab522b813b1d5ba4c62a