{"id":"CVE-2026-41682","summary":"pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion","details":"pupnp is an SDK for development of UPnP device and control point applications. Prior to version 1.18.5, pupnp is vulnerable to SRRF port confusion due to port truncation via atoi() cast in parse_uri(). This issue has been patched in version 1.18.5.","aliases":["GHSA-q522-6w45-4j58"],"modified":"2026-07-13T06:11:15.877517Z","published":"2026-05-08T22:47:37.494Z","related":["openSUSE-SU-2026:10641-1"],"database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-195","CWE-918"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41682.json"},"references":[{"type":"WEB","url":"https://github.com/pupnp/pupnp/releases/tag/release-1.18.5"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/41xxx/CVE-2026-41682.json"},{"type":"ADVISORY","url":"https://github.com/pupnp/pupnp/security/advisories/GHSA-q522-6w45-4j58"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41682"},{"type":"FIX","url":"https://github.com/pupnp/pupnp/commit/def5f9a2bc42f5b3d713e37c516fbe840ce54b7b"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/pupnp/pupnp","events":[{"introduced":"0"},{"fixed":"def5f9a2bc42f5b3d713e37c516fbe840ce54b7b"},{"fixed":"5393efe3e2f71cba69f89d1cf96455500ae50f1a"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"1.18.5"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["release-1.14.30","release-1.18.4","release-1.18.3","release-1.18.2","release-1.18.1","release-1.18.0","release-1.14.29","release-1.14.28","release-1.14.27","release-1.14.26","release-1.14.25","release-1.14.24","release-1.14.23","release-1.14.22","release-1.14.21","release-1.14.20","release-1.14.19","release-1.14.18","release-1.14.17","release-1.14.16","release-1.14.15","release-1.14.14","release-1.14.13","release-1.14.12","release-1.14.11","release-1.14.10","release-1.14.9","release-1.14.8","release-1.14.7","release-1.14.6","release-1.14.5","release-1.14.4","release-1.14.3","release-1.14.2","release-1.14.1","release-1.14.0","release-1.12.0","release-1.10.1","release-1.10.0","release-1.8.4","release-1.8.3","release-1.8.2","release-1.8.1","release-1.8.0","last_svn_trunk"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-41682.json","vanir_signatures_modified":"2026-07-13T06:11:15Z","vanir_signatures":[{"target":{"file":"upnp/src/genlib/net/uri/uri.c"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["323506672071223706582816056938227007673","197581530524018952083968313455359235749","105975492087612490425401115089016871751","16314056414327643559089622917848236552"]},"id":"CVE-2026-41682-94c6364a","signature_type":"Line","signature_version":"v1","source":"https://github.com/pupnp/pupnp/commit/def5f9a2bc42f5b3d713e37c516fbe840ce54b7b"},{"target":{"file":"upnp/src/genlib/net/uri/uri.c","function":"parse_hostport"},"deprecated":false,"digest":{"function_hash":"252270516394768011771004078417287829114","length":2433},"id":"CVE-2026-41682-a7f69310","signature_type":"Function","signature_version":"v1","source":"https://github.com/pupnp/pupnp/commit/def5f9a2bc42f5b3d713e37c516fbe840ce54b7b"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"}]}