Approved changes feed: RSS · Atom

cpe:2.3:a:fhmq:hmq:1.5.5:*:*:*:*:*:*:*

part: a version: 1.5.5 update: *

VendorFhmq (f521894b-3142-5c73-9874-90333f86a4d7)
ProductHmq (f922026a-656c-5d65-abcd-7ea7b07ae1af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-35512 vulnerable 2026-06-08 06:39:42.041698 Details available
hmq v1.5.5 is vulnerable to Denial of Service (DoS) due to a Null Pointer Exception. A remote attacker can trigger a broker crash by sending a specially crafted MQTT UNSUBSCRIBE packet with an illegal control character Topic. The failure to properly validate this field leads to a null pointer dereference, resulting in the immediate termination of the hmq process.
Published: 2024-05-29T16:55:34.086Z
Updated: 2026-04-16T14:39:03.891Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.