← Database

CVE-2024-48077

HIGH CVSS: 7.5 Published: 2026-01-15 Modified: 2026-06-17

Description

NanoMQ v0.22.7 is vulnerable to Denial of Service (DoS) due to improper resource throttling. A crafted sequence of requests causes the recv-q queue to saturate, leading to the rapid exhaustion of system file descriptors (FDs). This exhaustion triggers a process crash, rendering the broker unable to provide services.

Affected Platforms

Emqx Nanomq

Weakness Type

CWE-400, CWE-833

References