CVE-2024-10525 | Eclipse Mosquitto up to 2.0.18 SUBACK Packet on_subscribe heap-based overflow (Issue 190)

A vulnerability, which was classified as critical, has been found in Eclipse Mosquitto up to 2.0.18. Affected by this issue is the function on_subscribe of the component SUBACK Packet Handler. The manipulation leads to heap-based buffer overflow.

This vulnerability is handled as CVE-2024-10525. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.