Approved changes feed: RSS · Atom
cpe:2.3:a:justdoit0910:tinymqtt:2024-02-18:*:*:*:*:*:*:*part: a version: 2024-02-18 update: *
| Vendor | Justdoit0910 (d371bba4-ede1-5b57-8b13-628a97032346) |
|---|---|
| Product | Tinymqtt (4f87d228-1185-5855-96bb-4da3c34197cf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/justdoit0910/tinymqtt |
purl2cpe | 2026-06-01 10:12:39.400480 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-56353 |
vulnerable | 2026-06-08 07:33:15.591680 |
Details available
In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), a memory leak occurs due to the broker's failure to validate or reject malformed UTF-8 strings in topic filters. An attacker can exploit this by sending repeated subscription requests with arbitrarily large or invalid filter payloads. Each request causes memory to be allocated for the malformed topic filter, but the broker does not free the associated memory, leading to unbounded heap growth and potential denial of service under sustained attack.
Published: 2026-01-20T00:00:00.000Z
Updated: 2026-01-21T14:39:58.418Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.