CVE-2026-57488

What it is

pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the caller stores it as unsigned int. On LP64 systems, values greater than INT_MAX can truncate or wrap, so the HTTP parser can accept a body length different from the declared value. A remote adjacent-network peer can use the resulting parser disagreement to leave bytes to be interpreted as another request in persistent or proxied contexts, or can make a worker wait for an extremely large body and cause denial of service. This issue is fixed in 2.0.2.

At a glance

Exploitability

Can be exploited from the same network segment without logging in. High risk of service disruption.

Exploit odds

0.3% chance of exploitation in the next 30 days (EPSS).

Fix

A patch, advisory or fixed version is referenced. Upgrade or apply it.

Timeline

1. 2026-10-16 16:18 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-10-20 19:37 UTC Last updatedMost recent change to the record

Details

Published

2026-10-16 16:18 UTC

Last modified

2026-10-20 19:37 UTC

Exploit probability

0.3% · EPSS, next 30 days

Weakness

CWE-190 · Integer overflow

Record status

Analyzed

Affected

• Pupnp Project Pupnp < 2.0.2

Attack profile CVSS 3.1 · 7.1

Attack vector

Adjacent network

Complexity

Low

Privileges needed

None

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

High