Vulnerability Description
Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common Runtime or AWS IoT Device SDK release that bundles it.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://aws.amazon.com/security/security-bulletins/2026-147-aws/
- https://github.com/awslabs/aws-c-mqtt/releases/tag/v0.16.2
- https://github.com/awslabs/aws-c-mqtt/security/advisories/GHSA-g3x5-86mr-65p5
FAQ
What is CVE-2026-115417?
CVE-2026-115417 is a vulnerability with a CVSS score of 7.5 (HIGH). Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. ...
How severe is CVE-2026-115417?
CVE-2026-115417 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-115417?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.