CVE-2025-29491

An allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of libming v0.48 allows attackers to cause a Denial of Service (DoS) via supplying a crafted SWF file.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.34% chance of exploitation in the next 30 days, 26th percentile

Published

2025-03-27

Updated

2025-03-28

Proof-of-concept exploits (2)

• goodmow/PoC/blob/main/libming/libming-fuzz10.readme
• libming/libming/issues/330

References

• CVE Record
• NVD entry

Related

• CVE-2025-29485
• CVE-2025-29486
• CVE-2025-29487
• CVE-2025-29488
• CVE-2025-29489
• CVE-2025-29490