CVE-2025-0696

Summary

CVE-2025-0696 is a NULL Pointer Dereference vulnerability affecting Cesanta Frozen versions below 1.7. An attacker can exploit this issue by providing a maliciously crafted JSON input, leading to a crash of the embedded component. Successful exploitation could result in denial-of-service attacks or potentially more severe consequences. System administrators are advised to update their Cesanta Frozen installations to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.