libming Memory Leak Vulnerability in SWF Parsing Function Allowing Denial-of-Service

A memory leak vulnerability has been identified in the 'parseSWF_DEFINESCENEANDFRAMEDATA' function of 'libming' version 0.4.8. This vulnerability allows attackers to cause a denial-of-service by exploiting the function's failure to properly deallocate memory after parsing scene and frame data from SWF files. The issue arises because the function allocates memory for these data structures but lacks a mechanism to free it, leading to multiple memory leaks.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by leaking memory, which can lead to increased memory usage and potential application crashes.

Reproduction

The vulnerability can be reproduced by using the 'harness' tool with a crafted SWF file as input. The 'Poc-parseSWF_DEFINESCENEANDFRAMEDATA.zip' file contains the proof-of-concept exploit that triggers the memory leak.