VULNERABILITY INTELLIGENCE

CVE-2025-51495

CVSS score7.5 HIGH
EPSS probability0.42%
CISA KEVNot currently listed
Published2025-09-29
Last modified2026-06-17

Description

An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow.