What’s Vulnerable › Vulnerabilities

CVE-2019-12980

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-26 · updated 2026-06-17
• Weakness: CWE-190

Description

In Ming (aka libming) 0.4.8, there is an integer overflow (caused by an out-of-range left shift) in the SWFInput_readSBits function in blocks/input.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.

Affected products

• Libming: 0.4.8

References

• https://github.com/libming/libming/commit/a009a38dce1d9316cad1ab522b813b1d5ba4c62a
• https://github.com/libming/libming/commit/a009a38dce1d9316cad1ab522b813b1d5ba4c62a

Get alerted when CVE-2019-12980 or the next vulnerability affects your stack