CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt
C Mqtt ยท 2026-10-22
Actions
Technical Details
| Affected Versions | 0.9.1, 0.16.2 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-115417 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update the aws-c-mqtt library to version v0.16.2 to address the memory allocation vulnerability (CVE-2026-115417) and ensure the stability of your IoT device communications.
For Platform Teams
Integrate the updated aws-c-mqtt library (v0.16.2) into your platform to address the security vulnerability and maintain the reliability of MQTT communications.
For Executives
Implement the security patch for aws-c-mqtt to mitigate the risk of denial of service attacks and ensure the stability and security of IoT device communications.