Description (CNA)
An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/cesanta/mongoose
- https://github.com/cesanta/mongoose/pull/3131
- https://github.com/cainiao159357/CVE-2025-51495
ADP enrichment
No English description supplied.
No references supplied.