Skip to content
OpenAdvisories
Critical · 9.8 CVE-2015-20111 EUVD-2015-9391GHSA-w2jg-6vfx-xj22

miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buff…

Published Nov 18, 2024 · Updated Nov 18, 2024 · Assigned by mitre

Description

miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffer overflow and significant data leak, a different vulnerability than CVE-2019-12107. In Bitcoin Core before 0.12, remote code execution was possible in conjunction with CVE-2015-6031 exploitation.

References