Heap Buffer Overflow in NanoMQ by EMQX

CVE-2023-33660

What is CVE-2023-33660?

A critical vulnerability exists in NanoMQ version 0.17.2 that can be exploited through a heap buffer overflow in the 'copyn_str()' function located in mqtt_parser.c. This flaw allows attackers to overwrite buffer boundaries, potentially leading to a denial of service. Exploitation of this vulnerability could disrupt normal operations of applications utilizing NanoMQ, creating significant risks for affected systems. Organizations using NanoMQ are advised to review their implementations and apply necessary patches or security measures to mitigate this threat.

References