CVE-2026-110656: Out-of-bounds Read in miniupnp project miniupnpc
Description
CVE-2026-110656 is a low-severity vulnerability in the miniupnpc library up to version 2.3.3. It involves a one-byte heap out-of-bounds read in the minixml parseelt function due to improper handling of namespace prefixes when encountering a colon character ':'. A malicious or spoofed UPnP gateway on the local network can exploit this by sending crafted device descriptions or SOAP replies that end with ':' in an element name, causing the client to crash.
CVSS v4.0
Score 2.3low
Affected software
miniupnp project
miniupnpc
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The miniupnpc library versions up to 2.3.3 contain a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function. This occurs because the function skips an end-of-buffer check after advancing past a colon character ':' in namespace-prefix handling. An attacker controlling or spoofing a UPnP gateway on the local network can send a specially crafted device description or SOAP reply with an element name ending in ':' to trigger a crash in the client application using miniupnpc.
Potential Impact
The vulnerability allows a local network attacker (a malicious or spoofed UPnP gateway) to cause a denial of service by crashing the client application using the affected miniupnpc library. There is no indication of code execution or data leakage from the provided information. The CVSS 4.0 score is low (2.3) reflecting limited impact and high attack complexity.
Mitigation Recommendations
No official patch or fix information is provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using untrusted or unknown UPnP gateways on the local network to mitigate risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-14T13:08:39.334Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6acfa0f72cdf04f656905680
Added to database: 10/14/2026, 15:34:15 UTC
Last enriched: 10/14/2026, 16:03:26 UTC
Last updated: 10/14/2026, 19:00:32 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.