CVE-2025-56353

The tinyMQTT library (versions prior to commit 6226ade15bd4f97be2d196352e64dd10937c1962 ) is vulnerable to a memory leak due to a failure to validate or reject malformed UTF-8 strings in topic filters. An attacker can exploit this by sending repeated subscription requests containing arbitrarily l...