CVE-2025-65953 | NanoMQ up to 0.22.4 NanoNNG broker_tcp.c use after free (GHSA-r95p-wjm8-2qxr)

November 26, 2025 Yanac

A vulnerability, which was classified as critical, was found in NanoMQ up to 0.22.4. Affected is an unknown function of the file src/sp/transport/mqtt/broker_tcp.c of the component NanoNNG. The manipulation results in use after free.

This vulnerability is reported as CVE-2025-65953. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More