How many CVEs have patched ppp_handle_lcp?

1 published CVEs changed ppp_handle_lcp in cesanta/mongoose, in 2 distinct patches totalling 2 changed lines, between 2026 and 2026.

What is the latest CVE that changed ppp_handle_lcp?

CVE-2026-63626 (Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)), published 2026-10-14, changed lines 5599 of mongoose.c.

How does ppp_handle_lcp compare to the rest of cesanta/mongoose?

cesanta/mongoose has 24 CVEs with a located fix in total; 1 of them changed ppp_handle_lcp.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

RadicalNotion.AI

Log in Create an account

cesanta/mongoose

Function

2 files

ppp_handle_lcp

Name: ppp_handle_lcp in cesanta/mongoose: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Defined in 2 files

Last patched October 14, 2026

1

CVEs

That changed this function

2

Distinct patches

Backports counted once

2

Lines changed

Added plus removed

2026

Years

By CVE publication date

Overview

ppp_handle_lcp in cesanta/mongoose was changed by 1 published CVE fixes in 2026, in 2 distinct patches that added or removed 2 lines in total.

The name occurs in 2 files: mongoose.c, src/l2_ppp.c.

cesanta/mongoose has 24 CVEs with a located fix in total, so 4% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed ppp_handle_lcp, newest first, with the lines each fix touched.

Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)
CVE-2026-63626 · mongoose.c · line 5599 · +1 −0
High · CVSS 8.8
EPSS 0.2%2026-10-14
Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)
CVE-2026-63626 · src/l2_ppp.c · line 246 · +1 −0
High · CVSS 8.8
EPSS 0.2%2026-10-14

Get an alert when the next CVE fix lands in cesanta/mongoose, with the patched functions.

Monitor mongoose CVEs

Other functions in these files

Functions in the same files that CVE fixes also changed.

Other hotspots in the repository

Functions in cesanta/mongoose changed by the most CVE fixes.

mg_http_parse11 CVEs · mongoose.c mg_http_parse11 CVEs · src/http.c mg_tls_verify_cert_signature11 CVEs · mongoose.c mg_tls_verify_cert_signature11 CVEs · src/tls_builtin.c mg_tls_recv_cert10 CVEs · mongoose.c http_cb10 CVEs · mongoose.c

All patched functions in cesanta/mongoose

Frequently asked questions

Common questions about CVE fixes to ppp_handle_lcp.

How many CVEs have patched ppp_handle_lcp?: 1 published CVEs changed ppp_handle_lcp in cesanta/mongoose, in 2 distinct patches totalling 2 changed lines, between 2026 and 2026.
What is the latest CVE that changed ppp_handle_lcp?: CVE-2026-63626 (Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)), published 2026-10-14, changed lines 5599 of mongoose.c.
How does ppp_handle_lcp compare to the rest of cesanta/mongoose?: cesanta/mongoose has 24 CVEs with a located fix in total; 1 of them changed ppp_handle_lcp.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track cesanta/mongoose CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing