CVE-2025-29488: 
Homebrew vulnerability analysis and mitigation

libming v0.4.8 was discovered to contain a memory leak vulnerability in the parseSWF_INITACTION function. This vulnerability was disclosed on March 27, 2025, and affects the core functionality of the library when processing SWF files (NVD, MITRE).

The vulnerability manifests as a direct memory leak of 160 bytes in a single object allocation, occurring specifically within the parseSWF_INITACTION function. The issue stems from improper handling of memory reallocation during the parsing of SWF files. The vulnerability has been assigned a CVSS v3.1 base score of 6.5 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (NVD, Github PoC).

The memory leak can lead to resource exhaustion over time, potentially resulting in degraded system performance or denial of service conditions when processing SWF files. The impact is particularly significant in long-running processes or systems that handle multiple SWF files (Github Issue).

As of the vulnerability disclosure, there is no official patch available for libming v0.4.8. Users are advised to monitor for updates and implement memory usage monitoring as a temporary mitigation measure (Github Issue).