CVE-2017-11730: Libming Ming

Medium severity, CVSS 5.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.

Affected products

• Libming Ming: version 0.4.8 only

Published 2017-07-29. Last modified 2026-06-17.