CVE-2025-65502 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Null pointer dereference in add_ca_certs() in Cesanta Mongoose before 7.2 allows remote attackers to cause a denial of service via TLS initialization where SSL_…
Medium CVSS: 4.3

CVE-2025-65502

Null pointer dereference in add_ca_certs() in Cesanta Mongoose before 7.2 allows remote attackers to cause a denial of service via TLS initialization where SSL_CTX_get_cert_store() returns NULL.
Vendor
Cesanta
Product
Mongoose
CWE
CWE-476
Yayın Tarihi
2025-11-24 14:15:48
Güncelleme
2025-12-12 13:32:49
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-476 Mongoose MEDIUM Cesanta 2025

Referanslar

https://github.com/cesanta/mongoose/issues/3306 https://github.com/cesanta/mongoose/pull/3307