CVE-2025-26304

CVE-2025-26304 is a memory leak vulnerability identified in the parseSWF_EXPORTASSETS function within util/parser.c of libming version 0.4.8. This issue, published on 2025-02-20, is classified under CWE-244 and carries a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N), indicating high severity primarily due to its potential for information disclosure.

Remote attackers can exploit this vulnerability over the network with low complexity, requiring no privileges or user interaction. Successful exploitation allows attackers to achieve high-impact confidentiality loss through memory leakage, alongside low-impact integrity modification, without affecting availability or changing the scope of impact.

For mitigation details, refer to the advisory in the GitHub issue at https://github.com/libming/libming/issues/323.