EUVD-2026-37174

In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-0140

In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-0140

In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-0140: Out-of-bounds Read

In RtpPacket::decodePacket, there is a possible out-of-bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-0131: Undefined Security Weakness

In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

PT-2026-49790

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An integer overflow in the decodePacket function of RtpPacket can lead to out-of-bounds access. This issue may allow a local escalation of privilege without...

PUB-A-476459432

In RtpPacket::decodePacket, there is a possible out of bounds access due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

OSV-2026-750 Heap-buffer-overflow in MqttDecode_Props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513047073 Crash type: Heap-buffer-overflow READ 1 Crash state: MqttDecodeProps MqttDecodeDisconnect MqttClientDecodePacket...

PT-2026-43175

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513047073 Crash type: Heap-buffer-overflow READ 1 Crash state: MqttDecode Props MqttDecode Disconnect MqttClient DecodePacket...

PT-2023-35621 · Git +1 · Wolfmqtt

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: MqttProps Free, Handle Props, and MqttClient...

PT-2022-36836

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported, classified as an UNKNOWN READ. The crash state involves several functions: MqttProps Free, MqttClient DecodePacket, and MqttClie...

CVE-2021-45939

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientSubscribe...

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in WolfSSL wolfMQTT that stems from the product's MqttClientDecodePacket and MqttClientWaitType failing to properly determine memory...

PT-2021-24327

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient WaitType and MqttClient Unsubscribe. Recommendations: For wolfSSL wolfMQTT version 1....

PT-2021-24322

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow of 8 bytes in the MqttDecode Publish function, which is called from MqttClient DecodePacket and MqttClient HandlePacket. Recommendations: For wolfSSL wolfMQTT...

PT-2021-24328

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient WaitType and MqttClient Subscribe. Recommendations: For wolfSSL wolfMQTT version 1.9,...

PT-2021-24325

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttDecode Disconnect function, which is called from MqttClient DecodePacket and MqttClient WaitType. Recommendations: For wolfSSL wolfMQTT version 1.9...

PT-2021-24323

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient HandlePacket and MqttClient WaitType. Recommendations: For wolfSSL wolfMQTT version...

PT-2021-24326

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient WaitType and MqttClient Connect. Recommendations: For wolfSSL wolfMQTT version 1.9,...

PT-2021-24321

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow of 4 bytes in the MqttDecode Publish function, which is called from MqttClient DecodePacket and MqttClient HandlePacket. Recommendations: For wolfSSL wolfMQTT...