CVE-2020-24221

Name of the Vulnerable Software and Affected Versions miniupnp ngiflib version 0.4

Description An issue was discovered in the GetByte function, allowing local attackers to cause a denial of service (DoS) via a crafted .gif file, which can lead to an infinite loop.

Recommendations For miniupnp ngiflib version 0.4, consider disabling the GetByte function as a temporary workaround until a patch is available. Restrict the processing of .gif files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.