PT-2019-15003

Name of the Vulnerable Software and Affected Versions Arm Mbed OS version 2017-11-02 Description A denial-of-service issue was discovered in the MQTT library. The readMQTTLenString function is vulnerable to manipulation, allowing an attacker to change the mqttstring-lenstring.len value to a large...

CVE-2019-17210: Improper Input Validation

A denial-of-service issue was discovered in the MQTT library in Arm Mbed OS 2017-11-02. The function readMQTTLenString is called by the function MQTTDeserializepublish to get the length and content of the MQTT topic name. In the function readMQTTLenString, mqttstring-lenstring.len is a part of us...