CVE-2018-11226: Libming

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service (Segmentation fault and application crash) or possibly have unspecified other impact.

Affected products

• Libming Libming: up to and including 0.4.8

Published 2018-05-17. Last modified 2026-06-17.