CVE-2025-63651: Use After Free
Published Jan 29, 2026
·Updated
A use-after-free in the mkstringcharsearch function (mkcore/mkstring.c) of monkey commit f37e984 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request to the server.
Affected Software
2 affected components
maven/monkey/monkey
Monkey-project Monkey<=1.8.5
Event History
Jan 29, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-63651?
CVE-2025-63651 has a severity level classified as high due to the potential for Denial of Service (DoS) attacks.
2
How do I fix CVE-2025-63651?
To mitigate CVE-2025-63651, upgrade to the latest version of the Monkey project that addresses the vulnerability.
3
What is the impact of CVE-2025-63651?
CVE-2025-63651 allows attackers to exploit a use-after-free vulnerability leading to a Denial of Service.
4
Which versions are affected by CVE-2025-63651?
CVE-2025-63651 affects all versions of the Monkey project up to and including 1.8.5.
5
What component of Monkey is vulnerable in CVE-2025-63651?
The vulnerability in CVE-2025-63651 resides in the mk_string_char_search function found in mk_core/mk_string.c.