CVE-2025-29496

libming v0.4.8 was discovered to contain a segmentation fault via the decompileDUPLICATECLIP function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SWF file.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.34% chance of exploitation in the next 30 days, 26th percentile

Published

2025-03-27

Updated

2025-03-28

Proof-of-concept exploits (2)

• goodmow/PoC/blob/main/libming/libming-fuzz14.readme
• libming/libming/issues/330

References

• CVE Record
• NVD entry

Related

• CVE-2025-29485
• CVE-2025-29486
• CVE-2025-29487
• CVE-2025-29488
• CVE-2025-29489
• CVE-2025-29490