CVE-2026-34608

Summary of the impact for CVE-2026-34608: NanoMQ prior to 0.24.10 is susceptible to a heap/OOB read in webhook_inproc.c, where webhook_inproc.c:hook_work_cb() parses the message body with cJSON_Parse(body). The body comes from nng_msg_body(msg), a binary buffer without a guaranteed null terminato...

PT-2026-29862

NanoMQ MQTT Broker NanoMQ is an all-around Edge Messaging Platform. Prior to version 0.24.10, in NanoMQ's webhook inproc.c, the hook work cb function processes nng messages by parsing the message body with cJSON Parsebody. The body is obtained from nng msg bodymsg, which is a binary buffer withou...

PT-2022-37228 · Git +1 · Open62541

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 4 crash has been reported. The crash occurs in the UA Server networkCallback function and involves the fuzz binary message.cc...

PT-2022-37167 · Git +1 · Open62541

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 4 crash has been reported. The crash involves the UA Server networkCallback function and the fuzz binary message.cc file, with...

open62541/fuzz_binary_message: Heap-use-after-free in UA_WorkQueue_cleanup

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5742300546727936 Project: open62541 Fuzzer: aflopen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ...

open62541/fuzz_binary_message: Heap-use-after-free in NodeId_deleteMembers

Project: https://github.com/open62541/open62541.git Detailed report: https://oss-fuzz.com/testcase?key=5776306856787968 Project: open62541 Fuzzer: aflopen62541fuzzbinarymessage Fuzz target binary: fuzzbinarymessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Heap-use-after-free READ...

Pegasus Mail <= 3.11 Binary Message Handling Remote Overflow

Binary data 1301.prm...