GCVE - cpe:2.3:a:libming:libming:0.4.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:libming:libming:0.4.7:*:*:*:*:*:*:*

part: a version: 0.4.7 update: *

Vendor	Libming (`0726f6d7-6a1e-5b8e-b6e4-e224a5b020e7`)
Product	Libming (`2240d702-f261-5445-92e9-7df8e0d5c587`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/libming/libming`	purl2cpe	2026-06-01 10:13:48.226133

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-36239`	vulnerable	2026-06-08 06:06:28.666015	Details available libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function at parser.c. Published: 2023-06-22T00:00:00.000Z Updated: 2024-12-02T21:12:39.378Z Open on db.gcve.eu Reference links https://github.com/libming/libming/issues/273	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7578`	vulnerable	2026-06-08 05:09:56.573784	Details available Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly have unspecified other impact via a crafted SWF file. NOTE: this issue exists because of an incomplete fix for CVE-2016-9831. Published: 2017-04-07T04:33:00.000Z Updated: 2024-09-16T18:28:49.870Z Open on db.gcve.eu Reference links https://github.com/libming/libming/issues/68	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9266`	vulnerable	2026-06-08 05:08:23.191004	Details available listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift. Published: 2017-03-23T18:00:00.000Z Updated: 2024-08-06T02:42:11.269Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/11/10/11 https://blogs.gentoo.org/ago/2016/11/09/libming-listmp3-left-shift-in-listmp3-c http://www.securityfocus.com/bid/94254	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9265`	vulnerable	2026-06-08 05:08:23.190641	Details available The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file. Published: 2017-03-23T18:00:00.000Z Updated: 2024-08-06T02:42:11.254Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/94252 http://www.openwall.com/lists/oss-security/2016/11/10/10 https://blogs.gentoo.org/ago/2016/11/09/libming-listmp3-divide-by-zero-in-printmp3headers-list	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9264`	vulnerable	2026-06-08 05:08:23.190209	Details available Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file. Published: 2017-03-23T18:00:00.000Z Updated: 2024-08-06T02:42:11.204Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/94251 http://www.openwall.com/lists/oss-security/2016/11/10/9 https://blogs.gentoo.org/ago/2016/11/07/libming-listmp3-global-buffer-overflow-in-printmp3headers-listmp3-c/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.