PT-2026-114268

Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MG ENABLE TCPIP in src/net builtin.c does not reject a TCP option whose declared opts1 length exceeds the remaining option bytes. In handle opt, a NOP followed by a truncated MSS option...