CVE-2021-26528

2021-02-0820:13:36

mitre

www.cve.org

cesanta mongoose http server

vulnerable

remote oob write

memory pool exhaustion

cve-2021-26528

AI Score

9.4

Confidence

High

EPSS

0.015

Percentile

86.7%

JSON

The mg_http_serve_file function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool.

References

github.com/cesanta/mongoose/issues/1201