OSV-2026-750 Heap-buffer-overflow in MqttDecode_Props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513047073 Crash type: Heap-buffer-overflow READ 1 Crash state: MqttDecodeProps MqttDecodeDisconnect MqttClientDecodePacket...

PT-2023-35621 · Git +1 · Wolfmqtt

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: MqttProps Free, Handle Props, and MqttClient...

PT-2022-36836

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported, classified as an UNKNOWN READ. The crash state involves several functions: MqttProps Free, MqttClient DecodePacket, and MqttClie...

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in WolfSSL wolfMQTT that stems from the product's MqttClientDecodePacket and MqttClientWaitType failing to properly determine memory...

PT-2021-24321

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow of 4 bytes in the MqttDecode Publish function, which is called from MqttClient DecodePacket and MqttClient HandlePacket. Recommendations: For wolfSSL wolfMQTT...

PT-2021-24322

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow of 8 bytes in the MqttDecode Publish function, which is called from MqttClient DecodePacket and MqttClient HandlePacket. Recommendations: For wolfSSL wolfMQTT...

PT-2021-24328

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient WaitType and MqttClient Subscribe. Recommendations: For wolfSSL wolfMQTT version 1.9,...

PT-2021-24325

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttDecode Disconnect function, which is called from MqttClient DecodePacket and MqttClient WaitType. Recommendations: For wolfSSL wolfMQTT version 1.9...

PT-2021-24327

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient WaitType and MqttClient Unsubscribe. Recommendations: For wolfSSL wolfMQTT version 1....

PT-2021-24323

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient HandlePacket and MqttClient WaitType. Recommendations: For wolfSSL wolfMQTT version...

PT-2021-24326

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient WaitType and MqttClient Connect. Recommendations: For wolfSSL wolfMQTT version 1.9,...

PT-2021-27910

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the MqttDecode Props, MqttDecode Disconnect, and MqttClient DecodePacket function...

PT-2021-27893

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a READ 1 crash type. The crash state involves several functions: MqttDecode Props,...

PT-2021-27807

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the MqttClient DecodePacket, MqttClient WaitType, and...

PT-2021-27804

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow issue occurs when writing, leading to a crash. The crash involves the MqttDecode Disconnect, MqttClient DecodePacket, and MqttClient...

PT-2021-27735

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow write error. Technical details about the crash include the MqttDecode Publish, MqttClient DecodePacket, an...