Use After Free Vulnerability in MiniUPnP MiniSSDPd Affects Multiple Versions
CVE-2019-12106

7.5HIGH

Key Information:

Vendor: Miniupnp Project
Status: Miniupnpd
Vendor: CVE Published:; 15 May 2019

🔔 Create Miniupnp Project Vulnerability Alert

What is CVE-2019-12106?

The updateDevice function in minissdpd.c for MiniUPnP MiniSSDPd versions 1.4 and 1.5 is susceptible to a Use After Free vulnerability. This flaw allows a remote attacker to exploit the service, potentially leading to a crash of the minissdpd process. By manipulating memory, an adversary can destabilize the application, posing risks to the operational integrity of devices utilizing MiniUPnP. Users are advised to apply the relevant security updates to mitigate this vulnerability.