CVE-2019-19011: Miniupnp Project Ngiflib

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a file that lacks a palette.

Affected products

• Miniupnp Project Ngiflib: version 0.4 only

Published 2019-11-17. Last modified 2026-06-17.