CVE-2019-12107: Miniupnp.free Miniupnpd

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

The upnp_event_prepare function in upnpevents.c in MiniUPnP MiniUPnPd through 2.1 allows a remote attacker to leak information from the heap due to improper validation of an snprintf return value.

Affected products

• Miniupnp.free Miniupnpd: up to and including 2.1

Published 2019-05-15. Last modified 2026-06-17.