CVE Intelligence

Monkey-project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Monkey-project products: 9 record(s), with severity, exploitation and fixes.

Monkey 9

Exploited only (KEV) →

CVE-2025-63658 High · 7.5 CWE-121 Jan 29, 2026
Stack-based Buffer Overflow in Monkey-project Monkey
A stack overflow in the mk_http_index_lookup function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.
CVE-2025-63657 High · 7.5 CWE-125 Jan 29, 2026
Out-of-bounds Read in Monkey-project Monkey
An out-of-bounds read in the mk_mimetype_find function (mk_server/mk_mimetype.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.
CVE-2025-63656 High · 7.5 CWE-125 Jan 29, 2026
Out-of-bounds Read in Monkey-project Monkey
An out-of-bounds read in the header_cmp function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.
CVE-2025-63655 High · 7.5 CWE-476 Jan 29, 2026
NULL Pointer Dereference in Monkey-project Monkey
A NULL pointer dereference in the mk_http_range_parse function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.
CVE-2025-63653 High · 7.5 CWE-125 Jan 29, 2026
Out-of-bounds Read in Monkey-project Monkey
An out-of-bounds read in the mk_vhost_fdt_close function (mk_server/mk_vhost.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.
CVE-2025-63652 High · 7.5 CWE-416 Jan 29, 2026
Use After Free in Monkey-project Monkey
A use-after-free in the mk_http_request_end function (mk_server/mk_http.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.
CVE-2025-63651 High · 7.5 CWE-416 Jan 29, 2026
Use After Free in Monkey-project Monkey
A use-after-free in the mk_string_char_search function (mk_core/mk_string.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.
CVE-2025-63650 High · 7.5 CWE-125 Jan 29, 2026
Out-of-bounds Read in Monkey-project Monkey
An out-of-bounds read in the mk_ptr_to_buf in mk_core function (mk_memory.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.
CVE-2025-63649 High · 7.5 CWE-125 Jan 29, 2026
Out-of-bounds Read in Monkey-project Monkey
An out-of-bounds read in the http_parser_transfer_encoding_chunked function (mk_server/mk_http_parser.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted POST request to the server.