CVE-2024-42391

5.3 mediumEPSS 0.3%

Medium (5.3) in cesanta mongoose. EPSS 0.3% chance of exploitation in the next 30 days.

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE: CWE-823
Published: 2024-11-18
Modified: 2026-09-08
Record from: the NVD, synced 2026-10-19

Affected

cesanta:mongoose

References

https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-42391
https://cert-portal.siemens.com/productcert/html/ssa-142885.html

Check your stack JSON