NetSight
critical9.8

CVE-2021-41036

In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check rem_len size in readpacket.

Impact

In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check rem_len size in readpacket.

Affected products

VendorProductAffected versions
EclipsePaho Mqtt C\/C\+\+ Client
before 1.1.0

Weakness classification

References