CVE-2024-42390

Summary

CVE-2024-42390 is a newly disclosed vulnerability affecting Cesanta Mongoose Web Server version 7.14. An attacker can exploit this Out-of-range Pointer Offset issue by sending an unexpected TLS packet, causing the application to read unintended heap memory space. This could potentially result in arbitrary code execution or memory corruption, leading to serious security risks for organizations using this web server software. It is recommended that users upgrade to the latest version of Mongoose Web Server to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.