Buffer Overflow vulnerability in libming version 0.4.8, allows attackers to execute arbitrary code and obtain sensitive information via parser.c component.
The vulnerability is a buffer overflow (CWE-120) in the parser.c component of the Libming library. An attacker can supply crafted input data that causes a write beyond the boundaries of the allocated buffer in memory. This leads to overwriting critical data structures or return addresses, enabling the attacker to take control of the program execution flow.
An attacker can execute arbitrary code (RCE) in the context of a process using the vulnerable library and gain access to sensitive information processed by the application. Depending on the process privileges, complete system takeover is possible.
Patches available from the vendor should be applied according to the references — fix available as pull request #290 in the Libming project GitHub repository
Libming version 0.4.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLibming
APPLibming0.4.8
Related vulnerabilities
Heap-based buffer over-read w libming 0.4.8 — funkcja decompileIF()
Heap-based buffer over-read w libming 0.4.8 — funkcja decompileIF()
Out-of-bounds read w libming 0.4.8 — funkcja OpCode() w decompile.c
Buffer overflow vulnerability in function strcat in asan_interceptors.cpp in libming 0.4.8.
Buffer overflow vulnerability in function dcputchar in decompile.c in libming 0.4.8.