CVE-2025-29491 Details
Description
An allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of libming v0.48 allows attackers to cause a Denial of Service (DoS) via supplying a crafted SWF file.
A vulnerability in libming version 0.48 has been identified, specifically in the parseSWF_DEFINEBINARYDATA function. This vulnerability arises from an 'allocation-size-too-big' error, where the function attempts to allocate an excessively large block of memory while parsing SWF files. Attackers can exploit this vulnerability by supplying crafted SWF files, causing the application to exhaust memory resources and potentially leading to a denial-of-service condition.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 28, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/libming/libming/issues/330 | CISA-ADP | ExploitIssue Tracking |
| https://github.com/goodmow/PoC/blob/main/libming/libming-fuzz10.readme | [email protected] | Exploit |
| https://github.com/libming/libming/issues/330 | [email protected] | ExploitIssue Tracking |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-789 | Memory Allocation with Excessive Size Value | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| libming libming | 0.4.8 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 1, 2025 | Initial Analysis | [email protected] |
| Mar 28, 2025 | CVE Modified | CISA-ADP |
| Mar 27, 2025 | New CVE Received | [email protected] |