12 matches found
EUVD-2026-66752
In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...
EUVD-2026-66753
Stomper 5e2741e is vulnerable to Use-After-Free. When a client sends multiple CONNECT frames on the same TCP connection, and subsequently another client or a later connection sends SEND frames to a destination previously subscribed on that connection, the broker may dereference a pointer to a...
EUVD-2026-66755
Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closi...
CVE-2026-26447
Stomper (commit 5e2741e ), a STOMP broker, is vulnerable to a Use-After-Free bug. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. ...
CVE-2026-26448
Stomper (commit 5e2741e) is affected by a heap use-after-free vulnerability. When a client sends multiple CONNECT frames on the same TCP connection, and a subsequent client or later connection sends SEND frames to a destination previously subscribed on that connection, the broker may dereference ...
CVE-2026-26446
Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closi...
CVE-2026-26449
Stomper at commit 5e2741e is vulnerable to a null pointer dereference (invalid memory access) when a client sends a SEND frame missing the destination header field , causing the server process to crash. The root cause is insufficient validation of the destination header before frame processing, r...
EUVD-2026-66754
Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap...
EUVD-2026-66756
stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...
CVE-2026-26445
stomper at commit 5e2741e is vulnerable to a Denial of Service caused by a combination of partial STOMP frames and the broker's use of edge-triggered epoll (EPOLLET) with MSG_PEEK in recv(). A malicious client can send incomplete STOMP frames while keeping TCP connections open, causing sockets to...
G-Stomper Rhythm - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application G-Stomper Rhythm published at the 'play' market has multiple vulnerabilities...
