Miniupnp Project

Miniupnp Project maintains a narrowly scoped but widely embedded suite of UPnP protocol libraries and daemons used across networking devices, home automation systems, and embedded applications to facilitate device discovery and port mapping. Despite a small product count, the vendor sits prominently in embedded firmware and network infrastructure, where a single vulnerability can propagate to large numbers of devices with long support horizons. Vulnerabilities affecting this vendor skew toward serious outcomes, with an elevated share reaching critical severity, and frequently acquire public exploit code; the exposure concentrates in core components such as miniupnpd and miniupnpc and recurs through memory-safety weakness classes including out-of-bounds writes and reads, buffer-boundary violations, and NULL-pointer dereferences that are characteristic of C-based protocol parsers. Defenders should prioritize inventory and updates of devices running affected UPnP libraries, particularly those exposed to untrusted networks, since remediation often depends on manufacturer firmware releases rather than direct patching. Live severity, exploitation, and exposure counts are shown alongside this summary.