CVE-2021-36530: Miniupnp Project Ngiflib

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode, GetByteStr() copy memory buffer without checking the boundary.

Affected products

• Miniupnp Project Ngiflib: version 0.4 only

Published 2021-08-27. Last modified 2026-06-17.