CVE-2025-66168

CVE-2025-66168 concerns an integer overflow in MQTT Remaining Length handling in Apache ActiveMQ. The root cause is improper validation of the MQTT Remaining Length field, which can cause an overflow during decoding of malformed packets, leading to misinterpretation of the payload as multiple MQT...