CVE-2025-26304

Summary

CVE-2025-26304 is a memory leak vulnerability affecting the parseSWF_EXPORTASSETS function in libming v0.4.8, specifically located in util/parser.c. The memory leak occurs during the processing of SWF (Macromedia Flash) files, potentially leading to denial-of-service attacks due to excessive memory consumption or information disclosure from the leaked memory. An attacker could exploit this vulnerability by supplying specially crafted SWF files to the vulnerable system. Users are advised to update to the latest version of libming or consider alternative solutions to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.