Logo
›
›vulnerability›CVE-2025-51495
Name
CVE-2025-51495
Source
NVD ( link)Debian ( link)
Description
An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow.
CWEs
CWE-190
Published Date
Updated Date
Workaround
-
Advisories
https://github.com/cainiao159357/CVE-2025-51495Exploit
https://github.com/cesanta/mongooseProduct
https://github.com/cesanta/mongoose/pull/3131Issue Tracking

Analysis#

Affected Component
Analysis
mongoose
Exploitable

Vulnerability Ratings#

7.5
CVSSv31
NaN
other

Others affected component#

Name
Project
Project Version
Version
Status
mongoose
buildroot
master
7.21
Not Affected