Allocation of Resources Without Limits or Throttling in PUPnP - #VU159573
Published: November 6, 2026
Vulnerability identifier: #VU159573
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-770
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated adjacent-network attacker to exhaust memory and cause denial of service in PUPnP applications that register a root device.
The vulnerability exists due to missing upper limits on the MX header in SSDP M-SEARCH handling, allowing excessive reply delays that retain allocated memory. An unauthenticated adjacent-network attacker can repeatedly send requests with very large MX values to UDP port 1900, accumulating pending replies until device memory is exhausted.
Affected software
PUPnP
Remediation
Install security update from vendor's website.
PUPnP - update to 22.1.8