BaselineWatch
Desk

CVE-2026-115417

8.2 high Published

Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common Runtime or AWS IoT Device SDK release that bundles it.

Fix

Vendor advisories in the News 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 4

  1. StatusAwaiting Analysis → PublishedNVD modified 2026-10-29 01:52
  2. StatusPublished → Awaiting AnalysisNVD modified 2026-10-23 17:17
  3. StatusReceived → PublishedNVD modified 2026-10-22 20:34
  4. First seenCVSS 8.2NVD modified 2026-10-22 21:17

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 3