Use-After-Free Vulnerability in NanoMQ by EMQX

CVE-2023-33657

Summary

A use-after-free vulnerability has been identified in NanoMQ version 0.17.2, specifically within the function nni_mqtt_msg_get_publish_property() in mqtt_msg.c. This security flaw arises from inadequate data tracing, which may enable an attacker to manipulate memory allocation and potentially exploit this condition to trigger a denial of service attack, impacting the service availability of applications relying on NanoMQ.

References