libming Memory Leak Vulnerability in parseSWF_EXPORTASSETS Function

A memory leak vulnerability has been identified in the parseSWF_EXPORTASSETS function within util/parser.c of libming version 0.4.8. The vulnerability arises because the function allocates memory for arrays and strings without providing a deallocation mechanism, leading to memory leaks when parsing SWF export assets.

Impact

Exploitation of this vulnerability causes a memory leak, with 266 bytes leaked across three separate memory allocations, according to the AddressSanitizer.

Reproduction

The vulnerability can be reproduced by using the provided proof-of-concept file, 'Poc-parseSWF_EXPORTASSETS.zip', which contains a harness to trigger the memory leak by parsing SWF export assets with the vulnerable libming version 0.4.8.