← Database

CVE-2024-42385

MEDIUM CVSS: 4.0 Published: 2024-11-18 Modified: 2026-06-17

Description

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters.

Affected Platforms

Cesanta Mongoose

Weakness Type

CWE-140, NVD-CWE-Other

References