CVE-2025-59946

NanoMQ MQTT Broker (NanoMQ) is an Edge Messaging Platform. Prior to version 0.24.2, there is a classical data racing issue about sub info list which could result in heap use after free crash. This issue has been patched in version 0.24.2.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.6 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/nanomq/nanomq/issues/1863	Exploit Issue Tracking
https://github.com/nanomq/nanomq/security/advisories/GHSA-xg37-23w7-72p5	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:emqx:nanomq:*:*:*:*:*:*:*:*

History

13 Oct 2026, 09:10

Type	Values Removed	Values Added
Summary		(es) NanoMQ MQTT Broker (NanoMQ) es una Plataforma de Mensajería de Borde. Antes de la versión 0.24.2, existe un problema clásico de condición de carrera de datos relacionado con la lista de información de suscripción que podría resultar en un fallo por uso de memoria después de liberación en el heap. Este problema ha sido parcheado en la versión 0.24.2.

Information

Published : 2025-12-27 01:15

Updated : 2026-10-13 09:10

NVD link : CVE-2025-59946

Mitre link : CVE-2025-59946

CVE.ORG link : CVE-2025-59946

JSON object : View

Products Affected

emqx

nanomq

CWE

CWE-416

Use After Free

{"id": "CVE-2025-59946", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-59946", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-29T15:54:12.069408Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.6}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "nanomq", "product": "nanomq", "versions": [{"status": "affected", "version": "< 0.24.4"}]}]}], "published": "2025-12-27T01:15:41.880", "references": [{"url": "https://github.com/nanomq/nanomq/issues/1863", "tags": ["Exploit", "Issue Tracking"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nanomq/nanomq/security/advisories/GHSA-xg37-23w7-72p5", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "NanoMQ MQTT Broker (NanoMQ) is an Edge Messaging Platform. Prior to version 0.24.2, there is a classical data racing issue about sub info list which could result in heap use after free crash. This issue has been patched in version 0.24.2."}, {"lang": "es", "value": "NanoMQ MQTT Broker (NanoMQ) es una Plataforma de Mensajer\u00eda de Borde. Antes de la versi\u00f3n 0.24.2, existe un problema cl\u00e1sico de condici\u00f3n de carrera de datos relacionado con la lista de informaci\u00f3n de suscripci\u00f3n que podr\u00eda resultar en un fallo por uso de memoria despu\u00e9s de liberaci\u00f3n en el heap. Este problema ha sido parcheado en la versi\u00f3n 0.24.2."}], "lastModified": "2026-10-13T09:10:00.323", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:emqx:nanomq:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49D249C2-C388-4669-8801-929898E7DEAC", "versionEndExcluding": "0.24.4"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}