Pupnp vulnerabilities
We track 4 vulnerabilities in Pupnp products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
Latest Pupnp vulnerabilities
- 7.5 High severity
pupnp: Uncontrolled Resource Consumption
pupnp is an SDK for development of UPnP device and control point applications. Prior to 22.0.4, parse_hostport in upnp/src/genlib/net/uri/uri.c synchronously calls getaddrinfo while parse_uri is processing attacker-supplied hostnames from inbound HTTP request
- 7.1 High severity
pupnp: Integer Overflow or Wraparound
pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the caller stores it as uns
- 7.5 High severity
pupnp: Allocation of Resources Without Limits or Throttling
pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Transfer-Encoding: chunked causes the HTTP parser in upnp/src/genlib/net/http/httpparser.c to leave parser->content_length at zero while parser_parse_chunky_entity a
- 7.5 High severity
pupnp: NULL Pointer Dereference
pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNode_compare in ixml/src/node.c passes the nullable nodeValue, namespaceURI, prefix, and localName fields directly to strcmp. Non-namespaced attributes created b