CVE-2025-26310

Summary

CVE-2025-26310 is a denial-of-service vulnerability affecting libming v0.4.8. The issue lies in the ABC file parsing functions, specifically parseABC_CONSTANT_POOL and parseABC_FILE located in util/parser.c. Attackers can leverage multiple memory leaks in these functions to cause a denial of service by supplying carefully crafted ABC files.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.