CVE-2016-10523: Mqtt-Packet Project Mqtt-Packet

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.

Affected products

• Mqtt-Packet Project Mqtt-Packet: before 3.4.6 (fixed in 3.4.6); from 4.0.0, before 4.0.5 (fixed in 4.0.5)

Published 2018-05-31. Last modified 2026-06-17.