libming Segmentation Fault Vulnerability in DecompileSETVARIABLE Function

A segmentation fault vulnerability has been identified in libming version 0.4.8. This issue arises in the decompileSETVARIABLE function, where a read memory access to an invalid address, pointing to the zero page, triggers the fault. The vulnerability occurs during the decompilation of SWF files, specifically when processing SETVARIABLE actions.

Impact

Exploitation of this vulnerability leads to a segmentation fault, causing the application to crash.

Reproduction

The vulnerability can be reproduced by using libming version 0.4.8 to decompile a SWF file that contains SETVARIABLE actions. This can be done with the 'swftocxx' command-line tool, which is part of the libming distribution.