libming Memory Leak Vulnerability in parseSWF_MORPHFILLSTYLES Function

A memory leak vulnerability has been identified in libming version 0.4.8. The issue arises in the parseSWF_MORPHFILLSTYLES function, where memory allocated for processing MORPHFILLSTYLES is not properly deallocated after parsing. This oversight leads to memory leaks during the processing of SWF files.

Impact

Exploitation of this vulnerability causes a memory leak, where allocated memory is not released, potentially leading to increased memory usage and degradation of application performance over time.

Reproduction

The vulnerability can be reproduced by using libming version 0.4.8 to parse SWF files that include MORPHFILLSTYLES. The memory leak can be observed using the AddressSanitizer tool, which reports a direct leak of 41,144 bytes in one object allocated from the parseSWF_MORPHFILLSTYLES function.