CVE-2026-73863 | NanoMQ up to 0.24.13 MQTT Parser mqtt_parser.c nmq_subinfo_decode heap-based overflow

A vulnerability, which was classified as critical, was found in NanoMQ up to 0.24.13. Affected is the function nmq_subinfo_decode of the file nng/src/sp/protocol/mqtt/mqtt_parser.c of the component MQTT Parser. Executing a manipulation can lead to heap-based buffer overflow.

This vulnerability is handled as CVE-2026-73863. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More