CVE-2026-57487
Description
A flaw was found in libupnp. The HTTP parser fails to enforce configured message size limits when processing chunked transfer-encoded HTTP requests. A remote attacker can exploit this vulnerability by sending an excessively large chunked payload, forcing the application to buffer data beyond intended boundaries. This issue leads to memory exhaustion and a Denial of Service (DoS).
Statement
This vulnerability is rated as Important rather than Moderate because an unauthenticated remote attacker can exploit it across the network without user interaction to cause an immediate denial of service through host memory exhaustion. The libupnp library is not distributed in default Red Hat Enterprise Linux core repositories, although it is available via EPEL and may be embedded in third-party network services. Environments running applications that expose UPnP endpoints to untrusted traffic are susceptible to service termination when processing unconstrained chunked HTTP streams. Systems that do not host UPnP-enabled applications or that isolate endpoints to trusted management networks are not exposed to this issue.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
