7 matches found
CVE-2026-26447
Stomper (commit 5e2741e ), a STOMP broker, is vulnerable to a Use-After-Free bug. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. ...
CVE-2026-26448
Stomper (commit 5e2741e) is affected by a heap use-after-free vulnerability. When a client sends multiple CONNECT frames on the same TCP connection, and a subsequent client or later connection sends SEND frames to a destination previously subscribed on that connection, the broker may dereference ...
CVE-2026-26446
Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closi...
CVE-2026-26449
Stomper at commit 5e2741e is vulnerable to a null pointer dereference (invalid memory access) when a client sends a SEND frame missing the destination header field , causing the server process to crash. The root cause is insufficient validation of the destination header before frame processing, r...
CVE-2026-26445
stomper at commit 5e2741e is vulnerable to a Denial of Service caused by a combination of partial STOMP frames and the broker's use of edge-triggered epoll (EPOLLET) with MSG_PEEK in recv(). A malicious client can send incomplete STOMP frames while keeping TCP connections open, causing sockets to...
G-Stomper Rhythm - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application G-Stomper Rhythm published at the 'play' market has multiple vulnerabilities...
