OSV-2022-16

    Dashboard / Vulnerabilities / OSV-2022-16

    OSV-2022-16

    Published: 7 Jan 2022Last Modified: 13 Apr 2022

    Summary: UNKNOWN READ in MqttProps_Free

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43370 ``` Crash type: UNKNOWN READ Crash state: MqttProps_Free MqttClient_DecodePacket MqttClient_WaitType ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43370

    Affected packages

    Package

    Name: wolfmqtt

    Purl: pkg:generic/wolfmqtt

    Affected ranges

    Type: GIT

    Events:

    Introduced- 7fd2757bc6653924ea8bdaeb3cdc99fbc55c61fc
    Fixed -17eb652346678bd189742d7e45c946cae649d859

    Affected versions

    v1.11.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-16 | CVE-DB