Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N in decompile.c which causes a huge information leakage.