High severity7.5NVD Advisory· Published May 15, 2019· Updated Jun 17, 2026

CVE-2019-12107

Description

The upnp_event_prepare function in upnpevents.c in MiniUPnP MiniUPnPd through 2.1 allows a remote attacker to leak information from the heap due to improper validation of an snprintf return value.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Miniupnp.free/Miniupnpd
cpe:2.3:a:miniupnp.free:miniupnpd:*:*:*:*:*:*:*:*
Range: <=2.1
MiniUPnP/MiniUPnPddescription
Miniupnp Project/Miniupnpdllm-fuzzy
Range: <=2.1

Patches

Vulnerability mechanics

References

github.com/miniupnp/miniupnp/commit/bec6ccec63cadc95655721bc0e1dd49dac759d94nvdPatchThird Party Advisory
www.vdoo.com/blog/security-issues-discovered-in-miniupnpnvdExploitPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2019/05/msg00045.htmlnvd
usn.ubuntu.com/4542-1/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000