G6

Stack Buffer Overflow Issues Report

2

# Stack Buffer Overflow Issues Report Commit id: `0e66f3f8337ad9790c9ac4e5c186b4da68ae92b2` Affect version: ≤ 4.1.0 ## 1. Stack Buffer Overflow in `at_gethostbyname` In file `components/net/at/at_socket/at_socket.c` , function `at_gethostbyname`, the incoming parameter `name`...

MQTT-C Security Issue Report (mqtt_unpack_publish_response)

2

# **Overview** An issue was discovered in MQTT-C through 1.1.5. The MQTT input data processing function `mqtt_unpack_publish_response` in [mqtt.c](https://github.com/LiamBindle/MQTT-C/blob/be12c343ac5b7125d5e15cb9ab2d743de7f4fab4/src/mqtt.c) does not validate the length of incoming `topic_name_size`, which leads to...