CVE-2026-5245

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose versions up to 7.20

Description A flaw exists in Cesanta Mongoose up to version 7.20 within the mDNS Record Handler component, specifically in the handle mdns record function of the mongoose.c file. Manipulation of the buf argument can lead to a stack-based buffer overflow. Remote exploitation is possible, but requires a high degree of complexity and is considered difficult. The exploit has been publicly disclosed.

Recommendations Upgrade to version 7.21 or later.