<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: portable sdk for upnp project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2012-5965: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in th</title><link>https://patchthecve.com/cve/CVE-2012-5965.html</link><guid>https://patchthecve.com/cve/CVE-2012-5965.html</guid><pubDate>Tue, 16 Jun 2026 23:47:39 +0000</pubDate><description>HIGH 10.0: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn device) field in</description></item><item><title>CVE-2012-5964: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in th</title><link>https://patchthecve.com/cve/CVE-2012-5964.html</link><guid>https://patchthecve.com/cve/CVE-2012-5964.html</guid><pubDate>Tue, 16 Jun 2026 23:47:38 +0000</pubDate><description>HIGH 10.0: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long ServiceType (aka urn service) field </description></item><item><title>CVE-2012-5963: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in th</title><link>https://patchthecve.com/cve/CVE-2012-5963.html</link><guid>https://patchthecve.com/cve/CVE-2012-5963.html</guid><pubDate>Tue, 16 Jun 2026 23:47:38 +0000</pubDate><description>HIGH 10.0: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within a string</description></item><item><title>CVE-2012-5962: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in th</title><link>https://patchthecve.com/cve/CVE-2012-5962.html</link><guid>https://patchthecve.com/cve/CVE-2012-5962.html</guid><pubDate>Tue, 16 Jun 2026 23:47:38 +0000</pubDate><description>HIGH 10.0: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) 1.3.1 allows remote attackers to execute arbitrary code via a long DeviceType (aka urn) field in a UDP </description></item><item><title>CVE-2012-5960: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in th</title><link>https://patchthecve.com/cve/CVE-2012-5960.html</link><guid>https://patchthecve.com/cve/CVE-2012-5960.html</guid><pubDate>Tue, 16 Jun 2026 23:47:38 +0000</pubDate><description>HIGH 10.0: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka upnp:rootdevice) fi</description></item><item><title>CVE-2012-5959: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in th</title><link>https://patchthecve.com/cve/CVE-2012-5959.html</link><guid>https://patchthecve.com/cve/CVE-2012-5959.html</guid><pubDate>Tue, 16 Jun 2026 23:47:38 +0000</pubDate><description>HIGH 10.0: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in the portable SDK for UPnP Devices (aka libupnp, formerly the Intel SDK for UPnP devices) before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN (aka uuid) field within </description></item></channel></rss>