Medium severity4.3NVD Advisory· Published Nov 18, 2024· Updated Jun 17, 2026

CVE-2024-42391

Description

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cesanta/Mongoose Web Serverllm-fuzzy2 versions
= 7.14+ 1 more
- (no CPE)range: = 7.14
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-42391nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000