{"id":"CVE-2026-95125","details":"libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service.","modified":"2026-10-10T02:47:32.615576011Z","published":"2026-10-08T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/95xxx/CVE-2026-95125.json","cna_assigner":"mitre"},"references":[{"type":"WEB","url":"https://github.com/libming/libming/pull/450/changes/2a255b0aae9d22461c4e49b0b83be2fa4be40277"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/95xxx/CVE-2026-95125.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95125"},{"type":"REPORT","url":"https://github.com/libming/libming/issues/448"},{"type":"FIX","url":"https://github.com/libming/libming/pull/450"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libming/libming","events":[{"introduced":"0"},{"fixed":"b72cc2fda0e8b3792b7b3f7361fc3f917f269433"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"0.4.8"}],"source":"DESCRIPTION"}}],"versions":["ming-0_4_7","ming-0_4_6","ming-0_4_5","ming-0_4_4","ming-0_4_3","ming-0_4_0_rc2","ming-0_4_0_rc1","ming-0_4_0_beta5","ming-0_4_0_beta4","ming-0_4_0_beta3","ming-0_3_0","ming-0_3_beta2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-95125.json"}}],"schema_version":"1.9.0"}