CVE-2012-5963: Stack-based buffer overflow in the unique_service_name function in ssdp/ssdp_server.c in the SSDP parser in...

Security readout for executives and security teams

CVE-2012-5963 is a memory-corruption flaw in the UPnP library libupnp. A remote attacker could send a malformed UDP SSDP packet and potentially run code on a vulnerable device. Business risk depends on whether products in the estate embed libupnp 1.3.1 and expose UPnP/SSDP. Exposure is most likely in embedded devices, network appliances, or Linux systems using the portable SDK for UPnP Devices/libupnp 1.3.1. The source bundle does not provide a complete affected-product list, so product-level exposure must be confirmed against vendor advisories and local inventory. Prioritize discovery and remediation for internet-facing or broadly reachable network devices. Treat confirmed vulnerable deployments as high priority because the described impact includes remote code execution, but avoid assuming enterprise-wide exposure without product and version validation. Mitigation focus: Identify systems and devices using libupnp or vendor firmware that embeds it.; Review vendor advisories for fixed packages or firmware before selecting updates.; Apply vendor-provided libupnp, OS package, or firmware updates where applicable..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.