CVE-2012-5962: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in...

Security readout for executives and security teams

This is an old libupnp SSDP parsing flaw where a malformed UPnP network packet can overflow stack memory and potentially run attacker-controlled code. Business urgency depends on whether any current product, firmware, or embedded component still includes the affected SDK code and exposes UPnP traffic. Most likely exposure is legacy embedded devices, appliances, or software that bundled libupnp 1.3.1 and still listens for SSDP or UPnP packets. The bundle includes downstream advisories, but not a complete affected-product inventory. Prioritize legacy network-connected products and embedded systems first. This is a remote code execution class issue, but the available sources do not prove active exploitation or provide a complete affected inventory. Mitigation focus: Identify products or packages embedding libupnp 1.3.1.; Apply vendor firmware, OS, or package updates referenced by maintainers.; Disable UPnP or SSDP where it is not operationally required..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.