CVE-2026-5857

The CVE-2026-5857 entry documents a bug in Contiki-NG’s MQTT client, where parse_publish_vhdr() sets topic_len_received=1 before validating topic_len against the 64-byte limit. On the next TCP segment, a persisted flag causes the parser to bypass the guard and perform a memcpy() using an unvalida...

CocoaMQTT: Denial of Service via Reachable Assertion in `PUBLISH` Packet Parsing

A vulnerability exists in the packet parsing logic of CocoaMQTT that allows an attacker or a compromised/malicious MQTT broker to remotely crash the host iOS/macOS/tvOS application. The vulnerability is located in Source/FramePublish.swift during the extraction of the Topic string from the incomi...