In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check that would lead to denial-of-service attacks via a crafted SWF file.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-44591.json"