CVE-2024-10525

HIGH EPSS 99.0%
Published Oct 30, 20241y ago · Modified Jun 17, 20262w ago
7.2 CVSS 4.0
High
Find Similar
Published Oct 30, 2024 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_subscribe callback. This affects the mosquitto_sub and mosquitto_rr clients.

CVSS Details

Base Score
7.2
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
99.0% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 2

CWE-122
CWE-787 Out-of-bounds Write Memory Safety

Affected Products 1

VendorProductVersionRange
eclipsemosquitto*≥1.3.2  –  <2.0.19

References 4

  • github.com https://github.com/eclipse-mosquitto/mosquitto/commit/8ab20b4ba4204fdcdec78cb4d9f03c944a6e0e1c
    Patch
  • gitlab.eclipse.org https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/190
    ExploitIssue TrackingVendor Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/02/msg00022.html
  • mosquitto.org https://mosquitto.org/blog/2024/10/version-2-0-19-released/
    Release Notes

Remediation

  • github.com https://github.com/eclipse-mosquitto/mosquitto/commit/8ab20b4ba4204fdcdec78cb4d9f03c944a6e0e1c
    Patch