A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a crafted file.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11730.json"