CVE-2025-26304

A memory leak in libming's SWF parser causes the application to consume increasing amounts of memory over time, potentially leading to denial of service. This occurs when processing certain SWF files with export asset data.

The parseSWF_EXPORTASSETS function in util/parser.c fails to properly deallocate memory during SWF file parsing, allowing an attacker to craft malicious SWF files that trigger repeated memory allocation without corresponding deallocation. Exploitation requires processing untrusted SWF input and can result in memory exhaustion and application crash.