CVE-2018-11017: Libming

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

The newVar_N function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.

Affected products

• Libming Libming: up to and including 0.4.8

Published 2018-05-13. Last modified 2026-06-17.