CVE-2017-11729: A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1440) i...

Security readout for executives and security teams

CVE-2017-11729 is a denial-of-service flaw in Ming 0.4.8. If a vulnerable system processes a specially crafted file, the Ming decompiler can read past heap memory and crash. The main business risk is service disruption in systems that accept or batch-process untrusted media files. Exposure is most likely where Ming/libming 0.4.8 is installed and used to decompile or process untrusted files. Internet-facing exposure depends on an application upload, conversion, scanning, or analysis workflow that invokes Ming on attacker-controlled input. Prioritize remediation where Ming processes customer, partner, or internet-supplied files. Lower urgency applies to systems where Ming is absent, unused, or only handles trusted internal files. Mitigation focus: Inventory Ming/libming installations and confirm whether version 0.4.8 is present.; Check upstream libming and Gentoo advisory guidance for fixed package versions.; Avoid processing untrusted files with vulnerable Ming until remediated..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.