Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF() in decompile.c.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HLibming
APPLibming0.4.8
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2023-50628CRITICAL9.8PL ✓same product
Buffer overflow w Libming 0.4.8 umożliwiający zdalne wykonanie kodu
CVE-2020-11895CRITICAL9.1PL ✓same product
Heap-based buffer over-read w libming 0.4.8 — funkcja decompileIF()
CVE-2019-16705CRITICAL9.1PL ✓same product
Out-of-bounds read w libming 0.4.8 — funkcja OpCode() w decompile.c
CVE-2025-66869HIGH7.5same product
Buffer overflow vulnerability in function strcat in asan_interceptors.cpp in libming 0.4.8.
CVE-2025-66877HIGH7.5same product
Buffer overflow vulnerability in function dcputchar in decompile.c in libming 0.4.8.