A null pointer dereference vulnerability was found in the function stackswap (called from decompileSTACKSWAP) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ming | Libming | 0.4.8 (including) | 0.4.8 (including) |
| Ming | Ubuntu | esm-apps/xenial | * |
| Ming | Ubuntu | trusty | * |
| Ming | Ubuntu | upstream | * |
| Ming | Ubuntu | xenial | * |