CVE-2020-11895: 
Homebrew vulnerability analysis and mitigation

Ming (aka libming) version 0.4.8 contains a heap-based buffer over-read vulnerability (CVE-2020-11895) discovered on April 19, 2020. The vulnerability specifically affects the decompileIF() function in decompile.c, where a 2-byte heap-based buffer over-read can occur (Ubuntu Security).

The vulnerability is a heap-based buffer over-read vulnerability that occurs in the decompileIF() function located in decompile.c at line 2436. The issue manifests when reading 2 bytes beyond the allocated buffer boundary. The vulnerability has received a CVSS v3.1 base score of 9.1 (Critical), with attack vector being Network, attack complexity Low, requiring no privileges or user interaction (Ubuntu Security, GitHub Issue).

The vulnerability can lead to information disclosure and potential denial of service conditions. When exploited, it allows attackers to read beyond the intended memory boundaries, which could expose sensitive information from the heap memory (Ubuntu Security).

The vulnerability has been demonstrated with a proof-of-concept exploit that triggers a segmentation fault in the swftocxx utility. The exploit involves processing a specially crafted SWF file that causes the heap-buffer-overflow condition (GitHub Issue).

Users should upgrade to a version newer than libming 0.4.8 where this vulnerability has been addressed. For systems that cannot be immediately upgraded, it is recommended to restrict processing of untrusted SWF files (Ubuntu Security).