MQTT-C vulnerabilities

1 known vulnerability in MQTT-C from LiamBindle. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  MQTT-C: Out-of-bounds Read

  CVE-2026-54412Jun 14, 2026LiamBindle

  LiamBindle MQTT-C versions prior to 1.1.7 contain a heap-based out-of-bounds read and integer underflow in the mqtt_unpack_publish_response() function in src/mqtt.c. A remote unauthenticated attacker controlling an MQTT broker, or capable of injecting MQTT tra