CVE-2019-12109: Miniupnp Project Miniupnpd

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_port.

Affected products

• Miniupnp Project Miniupnpd: up to and including 2.1

Published 2019-05-15. Last modified 2026-06-17.