CVE-2020-10071 — Insufficient publish message length validation in MQTT
The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remote code execution. NCC-ZEP-03…
Published: 2020-06-05 · CVSS: 9.0 · CVSS 3.1
The Zephyr MQTT parsing code performs insufficient checking of the length field on publish messages, allowing a buffer overflow and potentially remote code execution. NCC-ZEP-031 This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7