CVE-2023-33659

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nmq_subinfo_decode() in the file mqtt_parser.c. An attacker could exploit this vulnerability to cause a denial of service attack.

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

1.07% chance of exploitation in the next 30 days, 64th percentile

Published

2023-06-06

Updated

2025-01-08

Proof-of-concept exploits (1)

• emqx/nanomq/issues/11542637★ · 2026-10-14

Security advisories

• nanomq/NanoNNG/pull/509/commits/6815c4036a2344865da393803ecdb7af27d8bde1

References

• CVE Record
• NVD entry

Related

• CVE-2023-33656
• CVE-2023-33657
• CVE-2023-34488