Every CVE Search/ Get API key

OSV-2026-750

Heap-buffer-overflow in MqttDecode_Props

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513047073

Crash type: Heap-buffer-overflow READ 1
Crash state:
MqttDecode_Props
MqttDecode_Disconnect
MqttClient_DecodePacket

What each source reports

OSV No score

Heap-buffer-overflow in MqttDecode_Props

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=513047073

Crash type: Heap-buffer-overflow READ 1
Crash state:
MqttDecode_Props
MqttDecode_Disconnect
MqttClient_DecodePacket
Record
OSV-2026-750
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
wolfmqtt
OSS-Fuzz
Listed versions, plus commit ranges
v1.10.0v1.11.0v1.12.0v1.13.0v1.14.0
Show 15 moreShow less
v1.14.1v1.15.0v1.15.1v1.16.0v1.17.0v1.17.1v1.18.0v1.19.0v1.19.1v1.19.2v1.20.0v1.21.0v1.8v1.9v2.0.0
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2026-750 is a vulnerability with no CVSS score yet in wolfmqtt, published May 16, 2026. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open