CVE-2026-102464

The io.vertx:vertx-mqtt component in Eclipse Vert.x versions [4.0.0, 4.5.34], [5.0.0, 5.0.12], [5.1.0, 5.1.9], and [5.2.0, 5.2.0] is vulnerable to unbounded memory growth . The MqttClient stores inbound QoS 2 PUBLISH messages in an internal map (qos2inbound ) while awaiting a PUBREL packet. Becau...