Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-59946

NanoMQ has a Use After Free vulnerability via sub info list

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

NanoMQ MQTT Broker (NanoMQ) is an Edge Messaging Platform. Prior to version 0.24.2, there is a classical data racing issue about sub info list which could result in heap use after free crash. This issue has been patched in version 0.24.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nanomq nanomq

  • < 0.24.4affected

References