High severity8.2NVD Advisory· Published Nov 18, 2024· Updated Sep 8, 2026

CVE-2024-42386

Description

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cesanta/Mongoose
cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*
Range: <=7.14
Cesanta/Mongoose Web Serverllm-fuzzy2 versions
= 7.14+ 1 more
- (no CPE)range: = 7.14
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-42386nvdThird Party Advisory
cert-portal.siemens.com/productcert/html/ssa-142885.htmlnvd

News mentions

Siemens Reyrolle 7SR5
CISA ICS Advisories

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000