{ "schema_version": "1.4.0", "id": "GHSA-p9q9-v828-q467", "modified": "2022-01-12T00:01:56Z", "published": "2022-01-02T00:00:49Z", "aliases": [ "CVE-2021-45936" ], "details": "wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from MqttClient_DecodePacket and MqttClient_WaitType).", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-45936" }, { "type": "WEB", "url": "https://github.com/wolfSSL/wolfMQTT/commit/84d4b53122e0fa0280c7872350b89d5777dabbb2" }, { "type": "WEB", "url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39053" }, { "type": "WEB", "url": "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wolfmqtt/OSV-2021-1348.yaml" } ], "database_specific": { "cwe_ids": [ "CWE-787" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2022-01-01T01:15:00Z" } }