miniupnp project

Records36All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

miniupnp project records in CISA KEV

No miniupnp project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ngiflib 17 records MEDIUM Miniupnpd 12 records HIGH Minissdpd 2 records LOW Miniupnp 1 record LOW Miniupnpc 1 record LOW

Records

17 records in Ngiflib · all components

TI-2022-12960 CVE-2022-30858 · GHSA-3vr8-7hqf-c92w

An issue was discovered in ngiflib 0.4.

MEDIUM 62

An issue was discovered in ngiflib 0.4.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00616 Published 2023-07-17 No fix listed CWE-400

TI-2023-20300 CVE-2023-39114 · GHSA-mrhv-v7jg-4384

ngiflib commit 84a75 was discovered to contain a segmentation violation via the function…

MEDIUM 58

ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDL_LoadAnimatedGif at ngiflibSDL.c.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00273 Published 2023-08-02 No fix listed

TI-2023-20299 CVE-2023-39113 · GHSA-74rc-r8rm-wp7r

ngiflib commit fb271 was discovered to contain a segmentation violation via the function…

MEDIUM 58

ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00273 Published 2023-08-02 No fix listed

TI-2023-19254 CVE-2023-37748 · GHSA-j64c-qhgp-m2v8

ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c.

MEDIUM 58

ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0028 Published 2023-07-19 No fix listed CWE-835

TI-2020-14849 CVE-2020-24221 · GHSA-cfp3-wf78-3pxx

An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local…

MEDIUM 58

An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service (DoS) via crafted .gif file (infinite loop).

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00321 Published 2023-08-11 No fix listed CWE-835

TI-2018-08282 CVE-2018-11576 · GHSA-39cx-43vf-mhh2

ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor.

MEDIUM 45

ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01422 Published 2018-05-31 No fix listed CWE-125

TI-2018-08281 CVE-2018-11575 · GHSA-9wmx-m83v-h427

ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg.

MEDIUM 45

ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01505 Published 2018-05-31 No fix listed CWE-787

TI-2018-07581 CVE-2018-10717 · GHSA-7fxx-c4v5-3v6v

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 does not consider the…

MEDIUM 42

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 does not consider the bounds of the pixels data structure, which allows remote attackers to cause a denial of service (WritePixels heap-based buffer overflow…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0195 Published 2018-05-03 No fix listed CWE-787

TI-2019-14579 CVE-2019-20219 · GHSA-jv46-g299-h499

ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c.

MEDIUM 41

ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor in ngiflib.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01288 Published 2020-01-02 No fix listed CWE-125

TI-2019-12301 CVE-2019-16347 · GHSA-gfv7-9jpr-9xm8

ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called…

MEDIUM 41

ngiflib 0.4 has a heap-based buffer overflow in WritePixels() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01499 Published 2019-09-16 No fix listed CWE-682

TI-2019-12300 CVE-2019-16346 · GHSA-2m3f-fq78-cf9h

ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called…

MEDIUM 41

ngiflib 0.4 has a heap-based buffer overflow in WritePixel() in ngiflib.c when called from DecodeGifImg, because deinterlacing for small pictures is mishandled.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01641 Published 2019-09-16 No fix listed CWE-682

TI-2018-07550 CVE-2018-10677 · GHSA-24xc-3gmc-877f

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks…

MEDIUM 41

The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which allows remote attackers to cause a denial of service (WritePixels heap-based buffer overflow and applica…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01457 Published 2018-05-02 No fix listed CWE-787

TI-2021-14786 CVE-2021-36531 · GHSA-qpjc-r4c8-485x

ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIB_NO_FILE mode…

MEDIUM 40

ngiflib 0.4 has a heap overflow in GetByte() at ngiflib.c:70 in NGIFLIB_NO_FILE mode, GetByte() reads memory buffer without checking the boundary.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01064 Published 2021-08-27 No fix listed CWE-787

TI-2021-14785 CVE-2021-36530 · GHSA-fw32-wp52-fv39

ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode…

MEDIUM 40

ngiflib 0.4 has a heap overflow in GetByteStr() at ngiflib.c:108 in NGIFLIB_NO_FILE mode, GetByteStr() copy memory buffer without checking the boundary.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01064 Published 2021-08-27 No fix listed CWE-787

TI-2019-13701 CVE-2019-19011 · GHSA-g3fm-rgq3-h9w3

MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a file that lacks a palette.

LOW 36

MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIndexToTrueColor in ngiflib.c via a file that lacks a palette.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01729 Published 2019-11-16 No fix listed CWE-476

TI-2018-08342 CVE-2018-11657 · GHSA-mfwc-pxgh-fj85

ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif.

LOW 35

ngiflib.c in MiniUPnP ngiflib 0.4 has an infinite loop in DecodeGifImg and LoadGif.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01046 Published 2018-06-01 No fix listed CWE-835

TI-2018-08284 CVE-2018-11578 · GHSA-rqjm-424f-4pr4

GifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has a Segmentation fault.

LOW 31

GifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has a Segmentation fault.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01002 Published 2018-05-31 No fix listed CWE-119

Open these records in search →

Critical	4
High	20
Medium	10
Low	2
No CVSS	0