Executive Summary

Integer overflow/wraparound in Cesanta Mongoose Web Server v7.14 allows an attacker to send malformed TLS packets, triggering a segmentation fault and causing a denial‑of‑service. The flaw is not yet listed in CISA KEV.

---

Authoritative CVE Metadata - CVSS Base Score: 7.5 (HIGH) - Published: 2024-11-18T10:15:06.943 - Last Modified: 2026-09-08T09:17:17.430

Original Description: Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.

"You cannot find yourself by going into the past. You can find yourself by coming into the present."

— Eckhart Tolle