CVE-2026-61633

Name of the Vulnerable Software and Affected Versions NanoMQ versions prior to 0.24.14

Description The client function nni mqtt msg decode unsubscribe() in nng/src/supplemental/mqtt/mqtt codec.c fails to handle a failed read uint16() when counting topics within a malformed UNSUBSCRIBE packet. A zero-length topic followed by trailing data can cause buf.curpos to remain unchanged while topic count increases. This allows a malicious MQTT broker to cause a connecting MQTT 3.1.1 client to hang, consume CPU and memory, and result in a repeated denial of service if automatic reconnection is enabled.

Recommendations Update to version 0.24.14.