OSV-2026-750 Heap-buffer-overflow in MqttDecode_Props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513047073 Crash type: Heap-buffer-overflow READ 1 Crash state: MqttDecodeProps MqttDecodeDisconnect MqttClientDecodePacket...

EUVD-2021-32646

Malicious code in bioql PyPI...

CVE-2021-45939

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientSubscribe...

CVE-2021-45938

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientUnsubscribe...

PT-2023-35621 · Git +1 · Wolfmqtt

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: MqttProps Free, Handle Props, and MqttClient...

Eclipse Foundation Paho MQTTClient-C library readPacket out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the readPacket functionality of Eclipse Foundation Embedded Paho MQTTClient-C library v1.0.0. A specially-crafted MQTT payload can lead to an out-of-bounds write. An attacker can send a malicious MQTT message to trigger this vulnerability...

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in WolfSSL wolfMQTT that stems from the product's MqttClientDecodePacket and MqttClientWaitType failing to properly determine memory...

OSV-2021-1204 Heap-buffer-overflow in MqttClient_DecodePacket

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38146 Crash type: Heap-buffer-overflow WRITE 1 Crash state: MqttClientDecodePacket MqttClientHandlePacket MqttClientWaitType...