CVE-2021-44591: Libming

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check that would lead to denial-of-service attacks via a crafted SWF file.

Affected products

  • Libming Libming: version 0.4.8 only

Published 2022-01-06. Last modified 2026-06-17.