CVE-2024-42389CWE-823

Use of Out-of-range Pointer Offset in Mongoose Web Server library

Medium · published November 18, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
22.8
In the wild
Unconfirmed
What it is

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00312 · 22.8th percentile
Weakness
CWE-823 · Use of Out-of-range Pointer Offset
Published
2024-11-18T09:06Z
EPSS history
Timeline
  • 18 NOV 09:06Z
    Use of Out-of-range Pointer Offset in Mongoose Web Server library
    cvelistv5