CVE-2025-66877CWE-121

CVE-2025-66877

High · published December 29, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
25.3
In the wild
Unconfirmed
What it is

⚡ A sneaky buffer overflow lurks in libming 0.4.8 that could let attackers wreak havoc! Think of it like trying to pour a gallon of water into a pint glass — when you overfill, things get messy! In this case, the overflow can lead to unpredictable behavior, just like that water spilling everywhere. An attacker could exploit this vulnerability to manipulate the stack and execute arbitrary code, potentially giving them complete control over the application. This could lead to data theft, corruption, or even a total service shutdown — absolutely devastating!

Put simply

Think of it like trying to pour a gallon of water into a pint glass — when you overfill, things get messy! In this case, the overflow can lead to unpredictable behavior, just like that water spilling everywhere. The buffer overflow in the function `dcputchar` allows the overflow of allocated memory, which can lead to the execution of malicious code if exploited correctly.

What to do

An attacker could exploit this vulnerability to manipulate the stack and execute arbitrary code, potentially giving them complete control over the application. This could lead to data theft, corruption, or even a total service shutdown — absolutely devastating! Immediately patch your libming library to version 0.4.9 or above to resolve this buffer overflow vulnerability. Additionally, review your code for any other vulnerable usages of this function and implement proper bounds checking to prevent similar issues in the future. You've got this! Follow these steps and you'll be well on your way to securing your application! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-12-29T23:15Z
Affected products (1)
ProductVersionsFixed in
libming/libmingall versions—
References (1)
EPSS history
Timeline
  • 29 DEC 00:00Z
    Buffer overflow vulnerability in function dcputchar in decompile.c in libming 0.4.8
    cvelistv5