CVE-2024-25767

nanomq 0.21.2 contains a Use-After-Free vulnerability in /nanomq/nng/src/core/socket.c.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:emqx:nanomq:0.21.2:*:*:*:*:*:*:*

History

01 May 2025, 15:00

Type Values Removed Values Added
First Time Emqx nanomq
Emqx
CPE cpe:2.3:a:emqx:nanomq:0.21.2:*:*:*:*:*:*:*
References () https://github.com/LuMingYinDetect/nanomq_defects/blob/main/nanomq_detect_1.md - () https://github.com/LuMingYinDetect/nanomq_defects/blob/main/nanomq_detect_1.md - Exploit, Third Party Advisory

26 Feb 2024, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-26 17:15

Updated : 2025-05-01 15:00


NVD link : CVE-2024-25767

Mitre link : CVE-2024-25767


JSON object : View

Products Affected

emqx

  • nanomq
CWE

No CWE.