CVE-2025-59947 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

NanoMQ is a messaging broker/bus for IoT Edge & SDV. Versions prior to 0.24.4 have a buffer overflow case while the PUBLISH packets trigger both shared subscrip…
High CVSS: 8.5

CVE-2025-59947

NanoMQ is a messaging broker/bus for IoT Edge & SDV. Versions prior to 0.24.4 have a buffer overflow case while the PUBLISH packets trigger both shared subscription and vanila subscription. This is fixed in version 0.24.4. As a workaround, disable shared subscription.
Vendor
Emqx
Product
Nanomq
CWE
CWE-120
Yayın Tarihi
2025-12-15 21:15:59
Güncelleme
2026-01-30 21:14:03
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-120 Nanomq HIGH Emqx 2025

Referanslar

https://github.com/nanomq/nanomq/commit/5f5581054bb92f102cf99251e8af2f43763d457b https://github.com/nanomq/nanomq/issues/2110 https://github.com/nanomq/nanomq/security/advisories/GHSA-98f4-cmg8-x7f3