Description (CNA)
Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted packet. To remediate this issue, users should upgrade to v5.0.1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| FreeRTOS / coreMQTT | affected 5.0.0 |
CWE
CWE-125
References
- https://github.com/FreeRTOS/coreMQTT/releases/tag/v5.0.1
- https://aws.amazon.com/security/security-bulletins/2026-032-aws/
- https://github.com/FreeRTOS/coreMQTT/security/advisories/GHSA-6qh9-r6jp-2wxc
ADP enrichment
No English description supplied.
No references supplied.