A heap buffer overflow in the r_readc() function of the libming library allows a crafted SWF file containing a malformed or truncated RECT header to trigger a denial of service. The flaw arises when input data is read into a buffer larger than the allocated space, leading to corruption of the heap and program termination. The weakness is a classic heap buffer overflow, commonly tracked by CWE-122.

All software that relies on libming versions up to and including 0.4.8 is affected. This includes any application that parses or manipulates SWF files through the libming library, regardless of vendor. The exact vendor or product names are not listed in the advisory, but any deployment using the specified library version is at risk.

Based on the description, the likely attack vector is an application that processes remote or local SWF files. A malicious actor can supply a crafted SWF file with a malformed or truncated RECT header to trigger the overflow, causing the application to crash. The EPSS score of < 1% indicates a low exploitation probability, and the vulnerability is not listed in CISA’s KEV catalog. The CVSS score of 6.5 suggests a medium severity. The impact is limited to service disruption; repeated exploitation could affect availability in high‑traffic environments.