A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
https://github.com/libming/libming/issues/76
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-3314
http://somevulnsofadlab.blogspot.jp/2017/07/libmingheap-buffer-overflow-in.html