Medium severity4.3NVD Advisory· Published Nov 18, 2024· Updated Sep 8, 2026

CVE-2024-42391

Description

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cesanta/Mongoose
cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*
Range: <=7.14
Cesanta/Mongoose Web Serverllm-fuzzy2 versions
= 7.14+ 1 more
- (no CPE)range: = 7.14
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-42391nvdThird Party Advisory
cert-portal.siemens.com/productcert/html/ssa-142885.htmlnvd

News mentions

Siemens Reyrolle 7SR5
CISA ICS Advisories

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000