High severity7.5NVD Advisory· Published May 15, 2019· Updated Jun 17, 2026
CVE-2019-12106
CVE-2019-12106
Description
The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process due to a Use After Free vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:miniupnp_project:miniupnpd:1.4:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:miniupnp_project:miniupnpd:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:miniupnp_project:miniupnpd:1.5:*:*:*:*:*:*:*
- (no CPE)range: 1.4, 1.5
- MiniUPnP/MiniSSDPddescription
- Range: 1.4, 1.5
Patches
Vulnerability mechanics
References
3- github.com/miniupnp/miniupnp/commit/cd506a67e174a45c6a202eff182a712955ed6d6fnvdPatchThird Party Advisory
- www.vdoo.com/blog/security-issues-discovered-in-miniupnpnvdExploitPatchThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/05/msg00037.htmlnvd
News mentions
0No linked articles in our index yet.