Stack-based Buffer Overflow in Cesanta Mongoose's mDNS Record Handler

CVE-2026-5245

What is CVE-2026-5245?

A stack-based buffer overflow vulnerability has been identified in Cesanta Mongoose prior to version 7.21, specifically in the mDNS Record Handler component. This vulnerability allows an attacker to manipulate the buffer argument, leading to potential remote exploitation. Although the attack complexity is deemed high, the risk is exacerbated by the public availability of the exploit. Affected users are urged to upgrade to version 7.21, which includes a patch to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References