Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-21888 2 Emqx, Nanomq 2 Nanomq, Nanomq 2026-03-23 7.5 High
NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. MQTT v5 Variable Byte Integer parsing out-of-bounds: get_var_integer() accepts 5-byte varints without bounds checks; reliably triggers OOB read / crash when built with ASan. This affects 0.24.6 and earlier.
CVE-2021-33175 1 Emqx 1 Emq X Broker 2024-11-21 7.5 High
EMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application being terminated by the operating system.