{"id":"CVE-2026-95116","published":"2026-10-08T21:18:03.740","lastModified":"2026-10-10T03:17:08.930","description":"An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-400"],"vendors":[],"products":[],"references":[{"url":"https://github.com/libming/libming/issues/449","tags":[]},{"url":"https://github.com/libming/libming/issues/449","tags":[]}],"exploitRefs":[{"url":"https://github.com/libming/libming/issues/449","tags":[]},{"url":"https://github.com/libming/libming/issues/449","tags":[]}],"hasPoc":true,"ai":{"summary":"A denial of service vulnerability exists in libming through version 0.4.8 where a remote attacker can trigger a crash in the readtag_file() function when processing SWF files, potentially causing service unavailability.","exploitability":"Exploitation is relatively straightforward as it requires only sending a crafted SWF file to a vulnerable system, with no authentication or user interaction needed.","blast_radius":"The impact could be significant in environments where SWF files are processed or served, potentially leading to widespread service disruption across multiple systems handling Flash content.","remediation":"Upgrade to libming version 0.4.9 or later to remediate this denial of service vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dos","swf","flash","file-processing"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:24:39.230Z"}}