Skip to content
OpenAdvisories
High · 8.2 CVE-2024-42386 EUVD-2024-39590GHSA-gjfh-x4fj-rg67

Use of Out-of-range Pointer Offset in Mongoose Web Server library

Published Nov 18, 2024 · Updated Sep 8, 2026 · Assigned by Nozomi

Description

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.

Affected products

VendorProductAffectedFixed
Cesanta Mongoose Web Server ≤ 7.14 —

Advisories 3

References