CVE-2021-36531: Miniupnp Project Ngiflib

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIB_NO_FILE mode, GetByte() reads memory buffer without checking the boundary.

Affected products

• Miniupnp Project Ngiflib: version 0.4 only

Published 2021-08-27. Last modified 2026-06-17.