CVE-2025-63655

The Monkey HTTP server is vulnerable to a NULL pointer dereference within the mk_http_range_parse function (located in mk_server/mk_http.c) in versions prior to commit f37e984 . An attacker can exploit this flaw by sending a crafted HTTP request to the server, resulting in a Denial of Service (Do...