High severity · published Mar 12, 2021
CVE-2021-28302
A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function
7.5
CVSS
1.2%
EPSS
No
On KEV
Description
A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume stack space and lead to a crash.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PU
Pupnp · Pupnp Project
before 1.14.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-28302
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-28302
Exploit
https://github.com/pupnp/pupnp/issues/249
Third Party Advisory
https://github.com/pupnp/pupnp/releases/tag/release-1.14.5
More from Pupnp
9.8
CVE-2021-29462
The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications
7.5
CVE-2026-77630
pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing
7.5
CVE-2026-57487
libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered
7.5
CVE-2026-57486
pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes
7.1
CVE-2026-57488
pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling