CVE-2025-0695

An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input.

Score

CVSS 3.1 5.3 Medium

Status

Deferred - prodsec@nozominetworks.com

Published

2025-01-27

Last modified

2025-02-12

Weaknesses

CWE-770

Affected products

• Frozen (Cesanta)

References

• https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-0695