CVE-2019-9113: Libming Ming

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Ming (aka libming) 0.4.8 has a NULL pointer dereference in the function getString() in the decompile.c file in libutil.a.

Affected products

• Libming Ming: version 0.4.8 only

Published 2019-02-25. Last modified 2026-06-17.