Critical severity9.8NVD Advisory· Published Jun 10, 2019· Updated Jun 17, 2026
CVE-2018-20355
CVE-2018-20355
Description
An invalid write of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Cesanta/Mongoose Embedded Web Server Librarydescription
- Range: <=6.13
Patches
Vulnerability mechanics
References
1- github.com/insi2304/mongoose-6.13-fuzz/blob/master/Simplest_Web_Server_Use_After_Free-mg_http_free_proto_data_cgi.pngnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.