CVE-2024-42648

Description

NanoMQ v0.22.10 was discovered to contain a heap overflow which allows attackers to cause a Denial of Service (DoS) via a crafted CONNECT message.

Affected Platforms

Weakness Type

CWE-787, CWE-122

References

• https://github.com/nanomq/nanomq
• https://github.com/songxpu/bug_report/blob/master/MQTT/NanoMQ/CVE-2024-42648.md