CVE Vulnerabilities

CVE-2025-26304

Improper Clearing of Heap Memory Before Release ('Heap Inspection')

Published: Feb 20, 2025 | Modified: Apr 22, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.

Weakness

Using realloc() to resize buffers that store sensitive information can leave the sensitive information exposed to attack, because it is not removed from memory.

Affected Software

NameVendorStart VersionEnd Version
LibmingLibming0.4.8 (including)0.4.8 (including)

References