---
title: "libming vulnerabilities: CVEs, CISA KEV and security advisories"
url: https://radicalnotion.ai/vendor/libming
type: vendor
description: "libming has 126 published CVEs, 0 in CISA KEV and 103 with public exploits."
updated: 2026-10-08
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# libming vulnerabilities

- **Published CVEs:** 126
- **In CISA KEV:** 0
- **With a public exploit:** 103
- **With a patch:** 8
- **Average CVSS:** 7.0
- **CVEs in the last two years:** 26
- **First CVE:** 2017-02-16
- **Latest CVE:** 2026-10-08

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 4 |
| High | 38 |
| Medium | 84 |
| Low | 0 |
| Unscored | 0 |

## Most affected products

| Product | CVEs |
| --- | --- |
| [libming](https://radicalnotion.ai/vendor/libming/libming) | 126 |
| [ming](https://radicalnotion.ai/vendor/libming/ming) | 17 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-125](https://radicalnotion.ai/cwe/cwe-125) | Out-of-bounds Read | 22 |
| [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 21 |
| [CWE-476](https://radicalnotion.ai/cwe/cwe-476) | NULL Pointer Dereference | 18 |
| [CWE-401](https://radicalnotion.ai/cwe/cwe-401) | Missing Release of Memory after Effective Lifetime | 11 |
| [CWE-416](https://radicalnotion.ai/cwe/cwe-416) | Use After Free | 8 |
| [CWE-787](https://radicalnotion.ai/cwe/cwe-787) | Out-of-bounds Write | 7 |
| [CWE-200](https://radicalnotion.ai/cwe/cwe-200) | Exposure of Sensitive Information to an Unauthorized Actor | 6 |
| [CWE-400](https://radicalnotion.ai/cwe/cwe-400) | Uncontrolled Resource Consumption | 6 |

## Assigning CNAs

| CNA | CVEs |
| --- | --- |
| [mitre](https://radicalnotion.ai/cna/mitre) | 121 |
| [fedora](https://radicalnotion.ai/cna/fedora) | 5 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2019 | 9 |
| 2020 | 4 |
| 2021 | 0 |
| 2022 | 7 |
| 2023 | 9 |
| 2024 | 6 |
| 2025 | 24 |
| 2026 | 2 |

## Latest CVEs

| CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2026-95116 | - | high | 7.5 | 0.5% | No | 2026-10-08 |
| CVE-2026-95125 | - | medium | 6.5 | 0.3% | No | 2026-10-08 |
| CVE-2025-66869 | - | high | 7.5 | 0.3% | No | 2025-12-29 |
| CVE-2025-66877 | - | high | 7.5 | 0.3% | No | 2025-12-29 |
| CVE-2025-29490 | - | medium | 6.5 | 0.3% | No | 2025-03-27 |
| CVE-2025-29485 | - | medium | 6.5 | 0.4% | No | 2025-03-27 |
| CVE-2025-29488 | - | medium | 6.5 | 0.3% | No | 2025-03-27 |
| CVE-2025-29489 | - | medium | 6.5 | 0.3% | No | 2025-03-27 |
| CVE-2025-29484 | - | high | 7.5 | 0.5% | No | 2025-03-27 |
| CVE-2025-29486 | - | medium | 6.5 | 0.4% | No | 2025-03-27 |
| CVE-2025-29487 | - | high | 7.5 | 0.5% | No | 2025-03-27 |
| CVE-2025-29494 | - | medium | 6.5 | 0.3% | No | 2025-03-27 |

## Frequently asked questions

### How many CVEs does libming have?

libming has 126 published CVE records since 2017, including 26 in the last two years.

### How many libming CVEs are in CISA KEV?

None of libming's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Which libming products have the most CVEs?

The libming products with the most published CVEs are libming, ming.

### What are the most common weakness types in libming CVEs?

libming's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-476 (NULL Pointer Dereference), CWE-401 (Missing Release of Memory after Effective Lifetime).

### Are there public exploits for libming vulnerabilities?

Yes — 103 of libming's CVEs have a known public exploit.

### How many critical libming vulnerabilities are there?

libming has 4 critical and 38 high-severity CVEs.

### What is the average severity of libming CVEs?

The average CVSS base score across libming's scored CVEs is 7.0.

## Related vendors

- [Cap-go](https://radicalnotion.ai/vendor/cap-go) (127 CVEs)
- [carmelo](https://radicalnotion.ai/vendor/carmelo) (127 CVEs)
- [ChurchCRM](https://radicalnotion.ai/vendor/churchcrm) (127 CVEs)
- [Accellion](https://radicalnotion.ai/vendor/accellion) (126 CVEs)
- [Axis Communications](https://radicalnotion.ai/vendor/axis) (126 CVEs)
- [Johnson Controls](https://radicalnotion.ai/vendor/johnson-controls) (126 CVEs)
- [swftools](https://radicalnotion.ai/vendor/swftools) (126 CVEs)
- [Philips](https://radicalnotion.ai/vendor/philips) (125 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/libming). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.