CVE-2019-19307

An integer overflow in parsemqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS infinite loop, or possibly cause an out-of-bounds write, by sending a crafted MQTT protocol packet...

DEBIAN-CVE-2019-12951

An issue was discovered in Mongoose before 6.15. The parsemqtt function in mgmqtt.c has a critical heap-based buffer overflow...

PT-2019-13049

Name of the Vulnerable Software and Affected Versions Mongoose versions prior to 6.15 Description A critical heap-based buffer overflow issue was discovered in the parse mqtt function in mg mqtt.c. Recommendations For versions prior to 6.15, update to version 6.15 or later to resolve the issue...