CVE-2024-44775: DAVIDEPIANCA98 Kmqtt

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

kmqtt v0.2.7 is vulnerable to Denial of Service (DoS) due to a Null Pointer Exception. A remote attacker can cause the broker to crash by sending a specially crafted MQTT CONNECT packet that triggers an unhandled null reference, leading to an immediate process termination.

Affected products

• DAVIDEPIANCA98 Kmqtt: version 0.2.7 only

Published 2024-10-15. Last modified 2026-06-17.