CVE-2021-45938

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientUnsubscribe...

CVE-2021-45938

creationtimestamp| type| source ---|---|--- 2022-01-01 07:36:02+00:00| seen| https://t.me/cibsecurity/34803...

CVE-2021-45938

CVE-2021-45938 affects wolfSSL wolfMQTT 1.9. The issue is a heap-based buffer overflow in MqttClient_DecodePacket, triggered via MqttClient_WaitType and MqttClient_Unsubscribe. Root cause described as failure to properly determine memory boundaries. No remediation details are provided in the conn...