Answer in brief
CVE-2024-42386 records a Unknown severity vulnerability in Use of Out-of-range Pointer Offset in Mongoose Web Server library. The current sources do not mark it as known exploited. The current feed maps cesanta/mongoose (generic), Cesanta/Mongoose Web Server (generic), Siemens/Reyrolle 7SR5 (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps cesanta/mongoose (generic), Cesanta/Mongoose Web Server (generic), Siemens/Reyrolle 7SR5 (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| cesanta/mongoosegeneric | 0 | Not reported |
| Cesanta/Mongoose Web Servergeneric | 0 | Not reported |
| Siemens/Reyrolle 7SR5generic | >=0 <V2.70 | V2.70 |
Published upstream
Nov 18, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 8, 2026
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.
Quoted source text, attributed separately from HOL analysis.