{"id":"UBUNTU-CVE-2026-95125","details":"libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of service.","modified":"2026-10-17T13:01:19.391750355Z","published":"2026-10-15T00:00:00Z","upstream":["CVE-2026-95125"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-95125"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-95125"},{"type":"REPORT","url":"https://github.com/libming/libming/issues/448"},{"type":"REPORT","url":"https://github.com/libming/libming/pull/450"},{"type":"REPORT","url":"https://github.com/libming/libming/pull/450/changes/2a255b0aae9d22461c4e49b0b83be2fa4be40277"}],"affected":[{"package":{"name":"ming","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/ming?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.4.5-1.2ubuntu2","1:0.4.5-1.2ubuntu5","1:0.4.5-1.2ubuntu6","1:0.4.5-1.2ubuntu7"],"ecosystem_specific":{"binaries":[{"binary_version":"1:0.4.5-1.2ubuntu7","binary_name":"libming-util"},{"binary_name":"libming1","binary_version":"1:0.4.5-1.2ubuntu7"},{"binary_name":"libswf-perl","binary_version":"1:0.4.5-1.2ubuntu7"},{"binary_version":"1:0.4.5-1.2ubuntu7","binary_name":"ming-fonts-dejavu"},{"binary_name":"ming-fonts-opensymbol","binary_version":"1:0.4.5-1.2ubuntu7"},{"binary_name":"python-ming","binary_version":"1:0.4.5-1.2ubuntu7"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-95125.json"}}],"schema_version":"1.9.0","severity":[{"type":"Ubuntu","score":"medium"}]}