CVE-2025-29492: 
Homebrew vulnerability analysis and mitigation

libming v0.4.8 contains a segmentation fault vulnerability in the decompileSETVARIABLE function. The vulnerability was discovered and disclosed on March 27, 2025, affecting the libming software package. This security issue has been assigned CVE-2025-29492 and is currently tracked by multiple security organizations (NVD, MITRE).

The vulnerability manifests as a segmentation fault triggered by a READ memory access to an invalid address pointing to the zero page within the decompileSETVARIABLE function. The issue occurs during the decompilation process of SWF files, specifically when handling SETVARIABLE actions. According to CISA's assessment, the vulnerability has been assigned a CVSS v3.1 base score of 6.5 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The vulnerability is classified as CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) (NVD).

When exploited, this vulnerability can cause the application to crash due to the segmentation fault, potentially leading to denial of service conditions. The impact is primarily focused on availability, with no direct impact on confidentiality or integrity as indicated by the CVSS metrics (NVD).