Miniupnp Project vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-107159 MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData() that allows unauthenticated local network attackers toHigh 7.1 · Oct 7, 2026
• CVE-2026-5720 miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that allows remote attackers to cause a denial of service or information discHigh 7.1 · Apr 17, 2026
• CVE-2021-36531 ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIB_NO_FILE mode, GetByte() reads memory buffer without checking the boundary.High 8.8 · Aug 27, 2021
• CVE-2021-36530 ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode, GetByteStr() copy memory buffer without checking the boundary.High 8.8 · Aug 27, 2021
• CVE-2019-20219 ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c.High 8.8 · Jan 2, 2020
• CVE-2019-19011 MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a file that lacks a palette.High 7.5 · Nov 17, 2019
• CVE-2013-2600 MiniUPnPd has information disclosure use of snprintf()High 7.5 · Nov 1, 2019
• CVE-2019-16347 ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandledHigh 8.8 · Sep 16, 2019
• CVE-2019-16346 ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.High 8.8 · Sep 16, 2019
• CVE-2019-12111 A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c.High 7.5 · May 15, 2019
• CVE-2019-12109 A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_High 7.5 · May 15, 2019
• CVE-2019-12108 A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for int_High 7.5 · May 15, 2019
• CVE-2019-12106 The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process due to a Use After Free vulnerability.High 7.5 · May 15, 2019
• CVE-2018-11657 ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif.High 7.5 · Jun 1, 2018
• CVE-2018-11576 ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor.Critical 9.8 · May 30, 2018
• CVE-2018-11575 ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg.Critical 9.8 · May 30, 2018
• CVE-2018-10717 The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 does not consider the bounds of the pixels data structure, which allows remote attackers to causeHigh 8.8 · May 3, 2018
• CVE-2018-10677 The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial ofHigh 8.8 · May 2, 2018
• CVE-2017-1000494 Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (SegmentHigh 7.8 · Jan 3, 2018
• CVE-2017-8798 Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified otheCritical 9.8 · May 10, 2017
• CVE-2013-1462 Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to caHigh 7.8 · Jan 31, 2013
• CVE-2013-1461 The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (NULHigh 7.8 · Jan 31, 2013
• CVE-2013-0230 Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers toHigh 10 · Jan 31, 2013
• CVE-2013-0229 The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (serviceHigh 7.8 · Jan 31, 2013