NetSight
high7.5

CVE-2021-28302

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function.

Impact

A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume stack space and lead to a crash.

Affected products

VendorProductAffected versions
Pupnp ProjectPupnp
before 1.14.5

Weakness classification

References