OSV-2026-750 Heap-buffer-overflow in MqttDecode_Props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513047073 Crash type: Heap-buffer-overflow READ 1 Crash state: MqttDecodeProps MqttDecodeDisconnect MqttClientDecodePacket...

PT-2026-43175

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513047073 Crash type: Heap-buffer-overflow READ 1 Crash state: MqttDecode Props MqttDecode Disconnect MqttClient DecodePacket...

EUVD-2021-32646

Malicious code in bioql PyPI...

CVE-2021-45939

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientSubscribe...

CVE-2021-45938

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClientDecodePacket called from MqttClientWaitType and MqttClientUnsubscribe...

PT-2023-35621 · Git +1 · Wolfmqtt

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: MqttProps Free, Handle Props, and MqttClient...

Eclipse Foundation Paho MQTTClient-C library readPacket out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the readPacket functionality of Eclipse Foundation Embedded Paho MQTTClient-C library v1.0.0. A specially-crafted MQTT payload can lead to an out-of-bounds write. An attacker can send a malicious MQTT message to trigger this vulnerability...

PT-2022-36836

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported, classified as an UNKNOWN READ. The crash state involves several functions: MqttProps Free, MqttClient DecodePacket, and MqttClie...

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in WolfSSL wolfMQTT that stems from the product's MqttClientDecodePacket and MqttClientWaitType failing to properly determine memory...

PT-2021-24327

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient WaitType and MqttClient Unsubscribe. Recommendations: For wolfSSL wolfMQTT version 1....

PT-2021-24322

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow of 8 bytes in the MqttDecode Publish function, which is called from MqttClient DecodePacket and MqttClient HandlePacket. Recommendations: For wolfSSL wolfMQTT...

PT-2021-24323

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient HandlePacket and MqttClient WaitType. Recommendations: For wolfSSL wolfMQTT version...

PT-2021-24321

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow of 4 bytes in the MqttDecode Publish function, which is called from MqttClient DecodePacket and MqttClient HandlePacket. Recommendations: For wolfSSL wolfMQTT...

PT-2021-24325

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttDecode Disconnect function, which is called from MqttClient DecodePacket and MqttClient WaitType. Recommendations: For wolfSSL wolfMQTT version 1.9...

PT-2021-24328

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient WaitType and MqttClient Subscribe. Recommendations: For wolfSSL wolfMQTT version 1.9,...

PT-2021-24326

Name of the Vulnerable Software and Affected Versions: wolfSSL wolfMQTT version 1.9 Description: The issue is a heap-based buffer overflow in the MqttClient DecodePacket function, which is called from MqttClient WaitType and MqttClient Connect. Recommendations: For wolfSSL wolfMQTT version 1.9,...

PT-2021-27910

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the MqttDecode Props, MqttDecode Disconnect, and MqttClient DecodePacket function...

PT-2021-27893

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, specifically a READ 1 crash type. The crash state involves several functions: MqttDecode Props,...

PT-2021-27809

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 8 crash has been reported. The crash involves the MqttClient DecodePacket, MqttClient WaitType, and MqttClient Ping ex function...

PT-2021-27810

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap buffer overflow error. Technical details include a crash type of Heap-buffer-overflow WRITE 1. The crash state involves...