PP
Vendor
Pupnp Project
7
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-77630 | PU Pupnp Pupnp Project | 7.5 | Oct 16 | pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing |
| CVE-2026-57488 | PU Pupnp Pupnp Project | 7.1 | Oct 16 | pupnp: Integer truncation in HTTP Content-Length parsing enables request smuggling |
| CVE-2026-57487 | PU Pupnp Pupnp Project | 7.5 | Oct 16 | libupnp chunked HTTP bodies can bypass g_maxContentLength and be fully buffered |
| CVE-2026-57486 | PU Pupnp Pupnp Project | 7.5 | Oct 16 | pupnp: NULL pointer dereference in ixmlNode_compare crashes on non-namespaced attributes |
| CVE-2026-55862 | PU Pupnp Pupnp Project | 6.5 | Oct 16 | pupnp: Incomplete fix for CVE-2021-28302: recursive DOM functions cause stack overflow |
| CVE-2021-29462 | PU Pupnp Pupnp Project | 9.8 | Apr 20 | The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications |
| CVE-2021-28302 | PU Pupnp Pupnp Project | 7.5 | Mar 12 | A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function |