CVE-2025-26309
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Feb 20, 2025
Updated: Feb 21, 2025
CWE ID 200
Summary
CVE-2025-26309 is a denial-of-service vulnerability affecting the parseSWF_DEFINESCENEANDFRAMEDATA function in libming v0.4.8's util/parser.c. An attacker can exploit this memory leak by supplying a specially crafted SWF file, causing the software to consume excessive resources and potentially crashing the system. This issue may lead to service disruptions and should be addressed promptly by updating to a patched version of libming.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.