Heap Buffer Overflow Vulnerability in NanoMQ by EMQX

CVE-2023-33658

Summary

A heap buffer overflow vulnerability has been identified in NanoMQ version 0.17.2. The flaw arises when the function nni_msg_get_pub_pid() is invoked, which may allow attackers to manipulate memory allocation. Successful exploitation could lead to denial of service, impacting the availability and reliability of applications using NanoMQ. Users are encouraged to review the official patches and updates to mitigate possible risks associated with this vulnerability.

References