Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common Runtime or AWS IoT Device SDK release that bundles it.
Fix
Vendor advisories in the News 1
- CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt AWS Security Bulletins · 2026-10-22
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 4
- StatusAwaiting Analysis → PublishedNVD modified 2026-10-29 01:52
- StatusPublished → Awaiting AnalysisNVD modified 2026-10-23 17:17
- StatusReceived → PublishedNVD modified 2026-10-22 20:34
- First seenCVSS 8.2NVD modified 2026-10-22 21:17
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.