CVE-2025-65953

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-65953

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-65953.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-65953

Aliases

GHSA-r95p-wjm8-2qxr

Published

2025-11-25T23:13:09.619Z

Modified

2026-03-10T21:53:57.242788Z

Severity

6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L CVSS Calculator

Summary

NanoMQ UAF of retain message due to invalid MQTTV5 properties

Details

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to version 0.22.5, a Heap-Use-After-Free (UAF) vulnerability exists in the TCP transport component of NanoMQ, which relies on the underlying NanoNNG library (specifically in src/sp/transport/mqtt/broker_tcp.c). The vulnerability is due to improper resource management and premature cleanup of message and pipe structures under specific malformed MQTTV5 retain message traffic conditions. This issue has been patched in version 0.22.5.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/65xxx/CVE-2025-65953.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-416"
    ]
}

References

Affected packages

Git / github.com/nanomq/nanomq

Affected ranges

Type

GIT

Repo

https://github.com/nanomq/nanomq

Events

Introduced

Fixed

6b0f5a8585098a13186d88b552d194aa4522e382

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.22.5"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-65953.json"