CVE-2019-12980: Libming

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

In Ming (aka libming) 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the SWFInput_readSBits function in blocks/input.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.

Affected products

• Libming Libming: version 0.4.8 only

Published 2019-06-26. Last modified 2026-06-17.