high7.8
CVE-2023-34488
NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages.
Impact
NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emqx | Nanomq | Version 0.17.5 |