CVE-2026-57488

🎯 CVE-2026-57488 🧪 PoC 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2026-57488 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the caller stores it as unsigned int. On LP64 systems, values greater than INT_MAX can truncate or wrap, so the HTTP parser can accept a body length different from the declared value. A remote adjacent-network peer can use the res

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the caller stores it as unsigned int. On LP64 systems, values greater than INT_MAX can truncate or wrap, so the HTTP parser can accept a body length different from the declared value. A remote adjacent-network peer can use the resulting parser disagreement to leave bytes to be interpreted as another request in persistent or proxied contexts, or can make a worker wait for an extremely large body and cause denial of service. This issue is fixed in 2.0.2.

Klassifikation & Betroffenheit:

CWE-190CWE-444 pupnp pupnp < 2.0.2pupnp_project pupnp *

Integer Overflow or Wraparound 🎯 Medium

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

🛡️ Empfohlene Mitigation: Ensure that all protocols are strictly defined, such that all out-of-bounds behavior can be identified simply, and require strict conformance to the protocol.

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-92 · Forced Integer Overflow (High)

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-28973 8.6 CVE-2026-10649 8.6 CVE-2026-34588 8.6 CVE-2025-11152 8.6 CVE-2024-34402 8.6

🩹 Patch verfügbar (OSV):

🩹 280cff736ee0a2384d8a67011382e6fe76a51167 (Commit) 🩹 de9602aef34ff722f3630d66c9be8eaa0aa9f012 (Commit)

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2026

Veröffentlicht 10/2026

Heute 21.10.

CVSS-Vektor-Analyse: 7.1

AV · Angriffsvektor Benachbart

AC · Komplexität Gering

PR · Privilegien Keine

UI · Interaktion Keine

S · Scope Unverändert

C · Vertraulichkeit Keine

I · Integrität Gering

A · Verfügbarkeit Hoch

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

CNA-Bewertung (GitHub_M): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Veröffentlicht:16.10.2026

Aktualisiert:20.10.2026 19:37

Assigner (CNA):GitHub_M

EUVD-ID:EUVD-2026-102930

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-190 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

Tier	CVEs	Anteil
≥90 %	726	0,2 %
≥50 %	3.223	0,9 %
≥10 %	22.086	5,9 %
<10 %	346.558	93,0 %

Tier

CVEs

Anteil

≥90 %

726

0,2 %

≥50 %

3.223

0,9 %

≥10 %

22.086

5,9 %

<10 %

346.558

93,0 %

Noch keine Analyse zu CVE-2026-57488

Beitrag zu CVE-2026-57488 verfassen

Zero-Day & Vulnerability Intelligence Hub