| CVE-2026-5720 | CRÍTICO9.1 | miniupnpd contains an integer underflow vulnerability in SOAPAction header parsing that allows remote attackers to cause a denial of service or information disclosure by sending a malformed SOAPAction header with a single quote. Attackers can trigger an out-of-bounds memory read by exploiting improper length validation | 17/04/2026 |
| CVE-2020-24221 | MEDIO5.5 | An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service (DoS) via crafted .gif file (infinite loop). | 11/08/2023 |
| CVE-2023-39114 | MEDIO5.5 | ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDL_LoadAnimatedGif at ngiflibSDL.c. This vulnerability is triggered when running the program SDLaffgif. | 02/08/2023 |
| CVE-2023-39113 | MEDIO5.5 | ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c. This vulnerability is triggered when running the program gif2tga. | 02/08/2023 |
| CVE-2022-30858 | MEDIO6.5 | An issue was discovered in ngiflib 0.4. There is SEGV in SDL_LoadAnimatedGif when use SDLaffgif. poc : ./SDLaffgif CA_file2_0 | 17/07/2023 |
| CVE-2021-36531 | ALTO8.8 | ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIB_NO_FILE mode, GetByte() reads memory buffer without checking the boundary. | 27/08/2021 |
| CVE-2021-36530 | ALTO8.8 | ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode, GetByteStr() copy memory buffer without checking the boundary. | 27/08/2021 |
| CVE-2019-20219 | ALTO8.8 | ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c. | 02/01/2020 |
| CVE-2019-19011 | ALTO7.5 | MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a file that lacks a palette. | 17/11/2019 |
| CVE-2013-2600 | ALTO7.5 | MiniUPnPd has information disclosure use of snprintf() | 01/11/2019 |
| CVE-2019-16347 | ALTO8.8 | ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled. | 16/09/2019 |
| CVE-2019-16346 | ALTO8.8 | ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled. | 16/09/2019 |
| CVE-2019-12111 | ALTO7.5 | A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in copyIPv6IfDifferent in pcpserver.c. | 15/05/2019 |
| CVE-2019-12109 | ALTO7.5 | A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for rem_port. | 15/05/2019 |
| CVE-2019-12108 | ALTO7.5 | A Denial Of Service vulnerability in MiniUPnP MiniUPnPd through 2.1 exists due to a NULL pointer dereference in GetOutboundPinholeTimeout in upnpsoap.c for int_port. | 15/05/2019 |
| CVE-2019-12106 | ALTO7.5 | The updateDevice function in minissdpd.c in MiniUPnP MiniSSDPd 1.4 and 1.5 allows a remote attacker to crash the process due to a Use After Free vulnerability. | 15/05/2019 |
| CVE-2018-11657 | ALTO7.5 | ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif. | 01/06/2018 |
| CVE-2018-11578 | MEDIO6.5 | GifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has a Segmentation fault. | 31/05/2018 |
| CVE-2018-11576 | CRÍTICO9.8 | ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor. | 31/05/2018 |
| CVE-2018-11575 | CRÍTICO9.8 | ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg. | 31/05/2018 |