TI-2026-39288 CVE-2026-54412 · GHSA-28cw-rpqc-wqqj
MQTT-C Heap Out-of-Bounds Read and Integer Underflow in mqtt_unpack_publish_response()
Priority MEDIUM 40
LiamBindle MQTT-C versions prior to 1.1.7 contain a heap-based out-of-bounds read and integer underflow in the mqtt_unpack_publish_response() function in src/mqtt.c.