CVE-2021-45933

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow 8 bytes in MqttDecodePublish called from MqttClientDecodePacket and MqttClientHandlePacket...

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for embedded systems developers from Wolfssl, Inc. in the United States. Wolfssl wolfMQTT 1.9 suffers from a buffer error vulnerability that stems from a heap-based buffer overflow 4 bytes in MqttDecodePublish called from...

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in Wolfssl wolfMQTT that stems from the product's failure to properly determine memory boundaries when calling MqttDecodePublish from...