CVE-2019-12106: Miniupnp Project Miniupnpd

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process due to a Use After Free vulnerability.

Affected products

• Miniupnp Project Miniupnpd: version 1.4 only; version 1.5 only

Published 2019-05-15. Last modified 2026-06-17.