CVE-2026-115417
CVE-2026-115417 · Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common Runtime or AWS IoT Device SDK release that bundles it.
CVSS 8.2 · Alta · EPSS 0,4% · Corrección disponible
- Publicación
- Actualización
Productos y versiones afectados
aws-c-mqtt
- Versiones
- ≥ 0.9.1, < 0.16.2: Afectada (custom)
Actualiza a 0.16.2