Unauthenticated Remote Attacker Can Read Memory Out of Bounds Due to Input Validation Flaw in MQTT Stack

CVE-2024-26000

What is CVE-2024-26000?

The vulnerability in the MQTT stack allows unauthenticated remote attackers to read memory out of bounds due to improper input validation. Although attempts at brute force attacks may not consistently succeed due to memory randomization, the risk remains significant, potentially exposing sensitive information.

References