Unrated severityOSV Advisory· Published Dec 15, 2025· Updated Dec 15, 2025
NanoMQ has Buffer Overflow
CVE-2025-59947
Description
NanoMQ is a messaging broker/bus for IoT Edge & SDV. Versions prior to 0.24.4 have a buffer overflow case while the PUBLISH packets trigger both shared subscription and vanila subscription. This is fixed in version 0.24.4. As a workaround, disable shared subscription.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
3- github.com/nanomq/nanomq/commit/5f5581054bb92f102cf99251e8af2f43763d457bmitrex_refsource_MISC
- github.com/nanomq/nanomq/issues/2110mitrex_refsource_MISC
- github.com/nanomq/nanomq/security/advisories/GHSA-98f4-cmg8-x7f3mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.