https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 16:11:10 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-110655 <p>miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof a gateway serving device descriptions or SOAP responses ending in &#39;=&#39; to crash the client.</p> <p>miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof a gateway serving device descriptions or SOAP responses ending in &#39;=&#39; to crash the client.</p> https://db.gcve.eu/vuln/fkie_cve-2026-110655 https://db.gcve.eu/vuln/ghsa-r8vm-xv99-82gx <p>miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof a gateway serving device descriptions or SOAP responses ending in &#39;=&#39; to crash the client.</p> <p>miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof a gateway serving device descriptions or SOAP responses ending in &#39;=&#39; to crash the client.</p> https://db.gcve.eu/vuln/ghsa-r8vm-xv99-82gx https://db.gcve.eu/vuln/ubuntu-cve-2026-110655 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: miniupnpc, Ubuntu:18.04:LTS: miniupnpc, Ubuntu:20.04:LTS: miniupnpc, Ubuntu:22.04:LTS: miniupnpc, Ubuntu:24.04:LTS: miniupnpc, Ubuntu:26.10: miniupnpc, Ubuntu:26.04:LTS: miniupnpc</p> <p>miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof a gateway serving device descriptions or SOAP responses ending in &#39;=&#39; to crash the client.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: miniupnpc, Ubuntu:18.04:LTS: miniupnpc, Ubuntu:20.04:LTS: miniupnpc, Ubuntu:22.04:LTS: miniupnpc, Ubuntu:24.04:LTS: miniupnpc, Ubuntu:26.10: miniupnpc, Ubuntu:26.04:LTS: miniupnpc</p> <p>miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof a gateway serving device descriptions or SOAP responses ending in &#39;=&#39; to crash the client.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-110655