CVE-2026-95116

Summary

A denial of service vulnerability exists in libming through version 0.4.8 where a remote attacker can trigger a crash in the readtag_file() function when processing SWF files, potentially causing service unavailability.

Exploitability

Exploitation is relatively straightforward as it requires only sending a crafted SWF file to a vulnerable system, with no authentication or user interaction needed.

Blast radius

The impact could be significant in environments where SWF files are processed or served, potentially leading to widespread service disruption across multiple systems handling Flash content.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to libming version 0.4.9 or later to remediate this denial of service vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.