CVE-2021-28302

Name of the Vulnerable Software and Affected Versions: pupnp versions prior to 1.14.5

Description: A stack overflow in the Parser parseDocument() function can cause a denial of service. The ixmlNode free() function will release a child node recursively, consuming stack space and leading to a crash. This issue is related to errors in handling XML entities.

Recommendations: For versions prior to 1.14.5, update to version 1.14.5 or later to resolve the issue. As a temporary workaround, consider disabling the Parser parseDocument() function until a patch is available.