Mongoose: Use-after-poison in rx_ip
A use-after-poison vulnerability was identified in the rx_ip function of the Mongoose library, reported by OSS-Fuzz. This issue involves accessing memory after it has been invalidated, which can lead to undefined behavior or crashes. The vulnerability affects multiple specific versions of Mongoose from 7.9 through 7.23. No official patch or remediation information is provided in the available data, and there are no known exploits in the wild.
AI Analysis
Technical Summary
The Mongoose library contains a use-after-poison read vulnerability in the rx_ip function, as reported by OSS-Fuzz (OSV-2022-937). This type of flaw occurs when the program reads memory that has been freed or otherwise invalidated, potentially leading to crashes or other unintended behavior. The affected versions explicitly include 7.9 through 7.23. No CVSS score or detailed impact assessment is available, and no vendor advisory or patch information is provided.
Potential Impact
The vulnerability can cause crashes or undefined behavior due to use-after-poison memory access in the rx_ip function. While no known exploits are reported, such memory safety issues can potentially be leveraged to compromise application stability or security depending on the context of use.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor for updates from the Mongoose maintainers or OSS-Fuzz reports.
Mongoose: Use-after-poison in rx_ip
Description
A use-after-poison vulnerability was identified in the rx_ip function of the Mongoose library, reported by OSS-Fuzz. This issue involves accessing memory after it has been invalidated, which can lead to undefined behavior or crashes. The vulnerability affects multiple specific versions of Mongoose from 7.9 through 7.23. No official patch or remediation information is provided in the available data, and there are no known exploits in the wild.
Affected software
pkg:generic/mongooseRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Mongoose library contains a use-after-poison read vulnerability in the rx_ip function, as reported by OSS-Fuzz (OSV-2022-937). This type of flaw occurs when the program reads memory that has been freed or otherwise invalidated, potentially leading to crashes or other unintended behavior. The affected versions explicitly include 7.9 through 7.23. No CVSS score or detailed impact assessment is available, and no vendor advisory or patch information is provided.
Potential Impact
The vulnerability can cause crashes or undefined behavior due to use-after-poison memory access in the rx_ip function. While no known exploits are reported, such memory safety issues can potentially be leveraged to compromise application stability or security depending on the context of use.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor for updates from the Mongoose maintainers or OSS-Fuzz reports.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- OSV-2022-937
- Osv Schema Version
- 1.3.0
- Ecosystems
- ["OSS-Fuzz"]
Threat ID: 6a7c9b3bbf8831d539cdc9d6
Added to database: 08/12/2026, 16:11:39 UTC
Last enriched: 08/12/2026, 16:33:36 UTC
Last updated: 09/22/2026, 20:42:48 UTC
Views: 30
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.