CVE-2021-45936: wolfSSL Wolfmqtt

Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days.

wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from MqttClient_DecodePacket and MqttClient_WaitType).

Affected products

• wolfSSL Wolfmqtt: version 1.9 only

Published 2022-01-01. Last modified 2026-06-17.