CVE-2024-35512

creationtimestamp| type| source ---|---|--- 2025-03-26 21:25:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8974...

CVE-2024-35512

hmq v1.5.5 is vulnerable to Denial of Service DoS due to a Null Pointer Exception. A remote attacker can trigger a broker crash by sending a specially crafted MQTT UNSUBSCRIBE packet with an illegal control character Topic. The failure to properly validate this field leads to a null pointer...

CVE-2024-35512

CVE-2024-35512 concerns the hmq v1.5.5 release, where crafted requests can trigger a Denial of Service. Affected component is the hmq process handling requests; the public documents do not disclose the exact root cause. Reported impact is DoS with low attack complexity and no data confidentiality...