MP
Vendor
Miniupnp Project
36
CVEs
0
On KEV
3
New 30D
Products
MI9.8
miniupnpd
miniupnp project
13 CVEs0 on KEV1 new
MI3.1
miniupnpc
miniupnp project
3 CVEs0 on KEV2 new
NG9.8
Ngiflib
Miniupnp Project
17 CVEs0 on KEV0 new
MI5.5
Minissdpd
Miniupnp Project
2 CVEs0 on KEV0 new
MI–
Miniupnp
Miniupnp Project
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110656 | MI miniupnpc miniupnp project | 3.1 | Oct 14 | miniupnpc through 2.3.3 Heap Out-of-Bounds Read via minixml parseelt |
| CVE-2026-110655 | MI miniupnpc miniupnp project | 3.1 | Oct 14 | miniupnpc through 2.3.3 Heap Out-of-Bounds Read via minixml parseatt |
| CVE-2026-107159 | MI miniupnpd miniupnp project | 6.5 | Oct 7 | MiniUPnPd through 2.3.11 Divide-by-Zero DoS via SSDP M-SEARCH MX Header |
| CVE-2026-5720 | MI miniupnpd miniupnp project | 9.1 | Apr 17 | miniupnpd Integer Underflow SOAPAction Header Parsing |
| CVE-2020-24221 | NG Ngiflib Miniupnp Project | 5.5 | Aug 11 | An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service (DoS) via crafted .gif file (infinite loop) |
| CVE-2023-39114 | NG Ngiflib Miniupnp Project | 5.5 | Aug 2 | ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDL_LoadAnimatedGif at ngiflibSDL.c |
| CVE-2023-39113 | NG Ngiflib Miniupnp Project | 5.5 | Aug 2 | ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c |
| CVE-2023-37748 | NG Ngiflib Miniupnp Project | 5.5 | Jul 19 | ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c |
| CVE-2022-30858 | NG Ngiflib Miniupnp Project | 6.5 | Jul 17 | An issue was discovered in ngiflib 0.4 |
| CVE-2021-36531 | NG Ngiflib Miniupnp Project | 8.8 | Aug 27 | ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIB_NO_FILE mode, GetByte() reads memory buffer without checking the boundary |
| CVE-2021-36530 | NG Ngiflib Miniupnp Project | 8.8 | Aug 27 | ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode, GetByteStr() copy memory buffer without checking the boundary |
| CVE-2019-20219 | NG Ngiflib Miniupnp Project | 8.8 | Jan 2 | ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c |
| CVE-2019-19011 | NG Ngiflib Miniupnp Project | 7.5 | Nov 17 | MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a file that lacks a palette |
| CVE-2013-2600 | MI Miniupnpd Miniupnp Project | 7.5 | Nov 1 | MiniUPnPd has information disclosure use of snprintf() |
| CVE-2019-16347 | NG Ngiflib Miniupnp Project | 8.8 | Sep 16 | ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled |
| CVE-2019-16346 | NG Ngiflib Miniupnp Project | 8.8 | Sep 16 | ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled |
| CVE-2019-12111 | MI Miniupnpd Miniupnp Project | 7.5 | May 15 | A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c |
| CVE-2019-12109 | MI Miniupnpd Miniupnp Project | 7.5 | May 15 | A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_port |
| CVE-2019-12108 | MI Miniupnpd Miniupnp Project | 7.5 | May 15 | A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for int_port |
| CVE-2019-12106 | MI Miniupnpd Miniupnp Project | 7.5 | May 15 | The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process due to a Use After Free vulnerability |
| CVE-2018-11657 | NG Ngiflib Miniupnp Project | 7.5 | Jun 1 | ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif |
| CVE-2018-11578 | NG Ngiflib Miniupnp Project | 6.5 | May 31 | GifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has a Segmentation fault |
| CVE-2018-11576 | NG Ngiflib Miniupnp Project | 9.8 | May 31 | ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor |
| CVE-2018-11575 | NG Ngiflib Miniupnp Project | 9.8 | May 31 | ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg |
| CVE-2018-10717 | NG Ngiflib Miniupnp Project | 8.8 | May 3 | The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 does not consider the bounds of the pixels data structure, which allows remote attackers to cause a denial of… |
| CVE-2018-10677 | NG Ngiflib Miniupnp Project | 8.8 | May 2 | The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service… |
| CVE-2017-1000494 | MI Miniupnpd Miniupnp Project | 7.8 | Jan 3 | Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and… |
| CVE-2017-8798 | MI Miniupnpd Miniupnp Project | 9.8 | May 11 | Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly have unspecified other impact |
| CVE-2016-3179 | MI Minissdpd Miniupnp Project | 5.5 | Mar 24 | The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (invalid free and daemon crash) via vectors related to error… |
| CVE-2016-3178 | MI Minissdpd Miniupnp Project | 5.5 | Mar 24 | The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service (out-of-bounds memory access and daemon crash) via vectors… |
| CVE-2015-6031 | MI Miniupnpc Miniupnp Project | – | Nov 2 | Buffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka MiniUPnPc) before 1.9.20150917 allows remote UPNP servers to cause a denial of service… |
| CVE-2014-3985 | MI Miniupnp Miniupnp Project | – | Sep 11 | The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash) via crafted headers that trigger an out-of-bounds read |
| CVE-2013-1462 | MI Miniupnpd Miniupnp Project | – | Jan 31 | Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of… |
| CVE-2013-1461 | MI Miniupnpd Miniupnp Project | – | Jan 31 | The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a denial of service (NULL pointer… |
| CVE-2013-0230 | MI Miniupnpd Miniupnp Project | – | Jan 31 | Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to execute arbitrary… |
| CVE-2013-0229 | MI Miniupnpd Miniupnp Project | – | Jan 31 | The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial of service (service crash) via a… |
