HIGH 8.2 NVD
CVE-2026-115417
Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial
Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application.
To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common Runtime or AWS IoT Device SDK release that bundles it.
References
- https://aws.amazon.com/security/security-bulletins/2026-147-aws/
- https://github.com/awslabs/aws-c-mqtt/releases/tag/v0.16.2
- https://github.com/awslabs/aws-c-mqtt/security/advisories/GHSA-g3x5-86mr-65p5
This high severity vulnerability with a CVSS score of 8.2 was published on 2026-10-22 via NVD.
vulnfeed aggregates 17279 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.