Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An out-of-bounds read in the http_parser_transfer_encoding_chunked function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted POST request to the server.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-63649 Out-of-Bounds Read in Monkey HTTP Server Enables Denial of Service Attack https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-63649
Post summary
CVE-2025-63649 is an out‑of‑bounds read vulnerability in Monkey HTTP Server that can trigger denial‑of‑service attacks.
CVE-2025-63649 An out-of-bounds read in the http_parser_transfer_encoding_chunked function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows attackers to cause a Denial o… https://www.cve.org/CVERecord?id=CVE-2025-63649
Post summary
CVE‑2025‑63649 is disclosed as an out‑of‑bounds read in monkey’s http_parser_transfer_encoding_chunked function, potentially leading to a denial‑of‑service. No PoC, exploit, or patch details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | monkey-project | monkey | - | - | - |