CVE-2024-42650: High severity nanomq nanomq vulnerability

Published Jul 15, 2025

Updated

NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PUBLISH message.

Affected Software

2 affected components

nanomq nanomq

emqx Nanomq=0.17.5

Event History

Jul 15, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-42650?

CVE-2024-42650 has been classified as a high severity vulnerability due to its potential to cause Denial of Service.

How do I fix CVE-2024-42650?

To fix CVE-2024-42650, upgrade to the latest version of NanoMQ that includes the security patch addressing this vulnerability.

What is the impact of CVE-2024-42650 on NanoMQ?

CVE-2024-42650 allows attackers to trigger a segmentation fault, leading to service unavailability.

What types of messages exploit CVE-2024-42650?

Crafted PUBLISH messages can exploit CVE-2024-42650 to cause a segmentation fault in the affected NanoMQ version.

Is CVE-2024-42650 remotely exploitable?

Yes, CVE-2024-42650 can be remotely exploited by sending specially crafted messages to the NanoMQ server.