CVE-2025-63653

Published January 29th, 2026

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECTS

Description

An out-of-bounds read in the mk_vhost_fdt_close function (mk_server/mk_vhost.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.

monkey/monkey

Monkey HTTP Server

GitHub

655

archersec/security-advisories

Security advisories for CVE publication

GitHub