GHSA-R3FR-7M74-Q7G2 CocoaMQTT: Denial of Service via Reachable Assertion in `PUBLISH` Packet Parsing

A vulnerability exists in the packet parsing logic of CocoaMQTT that allows an attacker or a compromised/malicious MQTT broker to remotely crash the host iOS/macOS/tvOS application. The vulnerability is located in Source/FramePublish.swift during the extraction of the Topic string from the incomi...

EUVD-2021-21088

Malware in sbrugna...

PT-2021-6465

Name of the Vulnerable Software and Affected Versions Eclipse Mosquitto versions 2.07 and earlier Description The issue is related to the incorrect handling of a PUBLISH packet with a topic length of 0, which can cause the server to crash. This can be exploited by a remote attacker to disrupt the...