Unrated severityOSV Advisory· Published Dec 15, 2025· Updated Dec 15, 2025
NanoMQ has Buffer Overflow
CVE-2025-59947
Description
NanoMQ is a messaging broker/bus for IoT Edge & SDV. Versions prior to 0.24.4 have a buffer overflow case while the PUBLISH packets trigger both shared subscription and vanila subscription. This is fixed in version 0.24.4. As a workaround, disable shared subscription.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- github.com/nanomq/nanomq/commit/5f5581054bb92f102cf99251e8af2f43763d457bmitrex_refsource_MISC
- github.com/nanomq/nanomq/issues/2110mitrex_refsource_MISC
- github.com/nanomq/nanomq/security/advisories/GHSA-98f4-cmg8-x7f3mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.