libming Memory Leak Vulnerability in parseSWF_IMPORTASSETS2 Function

A memory leak vulnerability has been identified in the parseSWF_IMPORTASSETS2 function of libming version 0.4.8. This vulnerability allows attackers to cause a denial-of-service by exploiting the function's failure to properly deallocate memory after parsing SWF import assets, leading to increased memory usage and potential application instability.

Impact

Exploitation of this vulnerability causes a memory leak, where allocated memory is not properly released, leading to increased memory consumption and potential application crashes.

Reproduction

The vulnerability can be reproduced by using the provided proof-of-concept SWF file with the libming library. The memory leak can be observed using a tool like AddressSanitizer, which will report the leaked memory allocations.