libming Memory Leak Vulnerability in parseSWF_INITACTION Function

A memory leak vulnerability has been identified in libming version 0.4.8 within the parseSWF_INITACTION function. The issue arises from improper management of memory reallocation, leading to a direct memory leak while parsing SWF files. This vulnerability can be exploited by processing specially crafted SWF files that trigger the memory leak during the initialization action parsing.

Impact

Exploitation of this vulnerability causes a memory leak, where allocated memory is not properly released, leading to increased memory usage and potential degradation of application performance over time.

Reproduction

The vulnerability can be reproduced by using the libming SWF processing tools, such as 'swftoperl' or 'swftocxx', with SWF files that contain ActionScript initialization actions. The AddressSanitizer (ASan) can be used to detect the memory leak, which will be reported as a direct leak of 160 bytes allocated by the parseSWF_INITACTION function.