Out-of-Bounds Read Vulnerability in NanoMQ MQTT Broker
CVE-2026-25627
6.5MEDIUM
What is CVE-2026-25627?
The NanoMQ MQTT Broker, an Edge Messaging Platform, suffers from an out-of-bounds read vulnerability that can be exploited via its MQTT-over-WebSocket transport. Versions before 0.24.8 allow attackers to crash the broker by sending a malformed MQTT packet with a larger than expected Remaining Length header, while providing a shorter payload. This discrepancy can lead to the copying of non-existent bytes from the buffer, resulting in application crashes. The vulnerability is remotely exploitable, necessitating an upgrade to version 0.24.8 or later to mitigate the issue.
Affected Version(s)
nanomq < 0.24.8