VYPR
High severity7.5NVD Advisory· Published Jan 15, 2026· Updated Apr 3, 2026

CVE-2024-48077

CVE-2024-48077

Description

NanoMQ v0.22.7 is vulnerable to Denial of Service (DoS) due to improper resource throttling. A crafted sequence of requests causes the recv-q queue to saturate, leading to the rapid exhaustion of system file descriptors (FDs). This exhaustion triggers a process crash, rendering the broker unable to provide services.

Affected products

1
  • cpe:2.3:a:emqx:nanomq:0.22.7:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.