Advisories · Technology
nanomq.
Every CVE that names nanomq among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
NanoMQ: Heap-Buffer-Overflow in `nmq_subinfo_decode()` During MQTT v5 SUBSCRIBE Parsing
- nanomq
- Memory corruption
- CVSS 2.0 Low
NanoMQ: Infinite Loop in UNSUBSCRIBE Decoder Leading to Remote DoS
- nanomq
- Denial of service
- CVSS 3.7 Low
NanoMQ: O(N²) Denial of Service in MQTT v5 Property Parsing
- nanomq
- Denial of service
- CVSS 6.5 Medium
NULL Pointer Dereference in REST API properties_parse via Malformed user_properties
- nanomq
- Memory corruption
- CVSS 2.6 Low
nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoS
- nanomq
- Memory corruption
- CVSS 6.5 Medium
NanoMQ Incorrectly Accepts a Malformed SUBSCRIBE and Can Be Driven into an ASAN-Detectable Out-of-Bounds Read
- nanomq
- Memory corruption
- CVSS 2.9 Low
NanoMQ: NULL Pointer Dereference
- nanomq
- Memory corruption
- CVSS 4.5 Medium
NanoMQ: QUIC Dialer Close Type Confusion
- nanomq
- Memory corruption
- CVSS 5.9 Medium
NanoMQ: NULL Pointer Dereference Crash in tcptran_pipe_peer During Session Restore
- nanomq
- nanomq NanoNNG
- Memory corruption
- CVSS 7.7 High
NanoMQ has Heap Buffer Overflow in URI Parameter Parsing
- nanomq
- Memory corruption
- CVSS 4.9 Medium
nanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB Read
- nanomq
- Memory corruption
- CVSS 3.1 Low
NanoMQ HTTP Auth: Missing username/password can trigger a NULL-pointer strlen() in auth_http.c:set_data(), causing a process crash — SIGSEGV, remotely triggerable
- nanomq
- Memory corruption
- CVSS 6.5 Medium
nanomq: OOB Read / Crash (DoS) via Malformed MQTT Remaining Length over WebSocket
- nanomq
- Memory corruption
- CVSS 7.5 High
MQTT v5 Variable Byte Integer parsing out-of-bounds: get_var_integer()
- nanomq
- Memory corruption
- CVSS 5.3 Medium
NanoMQ 0.24.6 Use-After-Free Leading to Heap Corruption and Broker Crash
- nanomq
- Memory corruption
- CVSS 6.5 Medium
NanoMQ $share/ Subscription Validation and Forwarding Parsing Inconsistency: NULL Pointer Increment Causes Crash
- nanomq
- Memory corruption
- CVSS 6.9 Medium
NanoMQ has Use-After-Free of malformed bridging message
- nanomq
- Memory corruption
- CVSS 7.5 High
NanoMQ has a Use After Free vulnerability via sub info list
- nanomq
- Memory corruption
- CVSS 8.5 High
NanoMQ has Buffer Overflow
- nanomq
- Memory corruption
- CVSS 6.0 Medium
NanoMQ UAF of retain message due to invalid MQTTV5 properties
- nanomq
- Memory corruption