CVE-2019-13503 - mq_parse_http in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read

HIGH

mq_parse_http in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read

Published Jul 11, 2019

7.5

HIGH

CVSS 3.1

EPSS 1.39%

mq_parse_http in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read.

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

Link	Providers	Tags
https://fuzzit.dev/2019/07/11/discovering-cve-2019-13504-cve-2019-13503-and-the-importance-of-api-fuzzing/		x_refsource_MISCBroken Link
https://github.com/cesanta/mongoose/pull/1035		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jul 11, 2019

Updated Aug 4, 2024

Reserved Jul 10, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a