Integer Overflow Vulnerability in Mongoose WebSocket Component
CVE-2025-51495

7.5HIGH

Key Information:

Vendor

Mongoose

Status
Mongoose WebSocket Component
Vendor
CVE Published:
29 September 2025

What is CVE-2025-51495?

An integer overflow vulnerability has been identified in the WebSocket component of Mongoose versions 7.5 through 7.17. This vulnerability can be exploited by attackers sending specially crafted WebSocket requests, leading to potential application crashes. Additionally, if the component is integrated incorrectly by downstream vendors, this vulnerability could result in a buffer overflow, exacerbating the issue. It is crucial for developers and organizations using Mongoose to review their integration and update to the latest version to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/cesanta/mongoose
https://github.com/cesanta/mongoose/pull/3131
https://github.com/cainiao159357/CVE-2025-51495

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.