-
-
Notifications
You must be signed in to change notification settings - Fork 353
Open
Description
While working in emitter project, I found a vulnerability in the Eclipse Paho Go MQTT library (github.com/eclipse/paho.mqtt.golang) (CVE-2025-10543) In versions ≤ 1.5.0, UTF-8 encoded strings longer than 65535 bytes are incorrectly encoded due to the string length being down-cast from int64/int32 to int16 without overflow validation.
Metadata
Metadata
Assignees
Labels
No labels