CVE-2024-31036

📊 6.8 MEDIUM⚡ 0.1%🎯 0 exploits

📅 Published Apr 22, 2024

📋 Status: Analyzed

A heap-buffer-overflow vulnerability in the read_byte function in NanoMQ v.0.21.7 allows attackers to cause a denial of service via transmission of crafted hexstreams.

CVSS v3.1 • 134c704f-9b21-4f2e-91b3-4a467353bcc0

🎯 Affected Products & Systems

1 product configurations affected

Filter by type:

Type	Vendor	Product	Version Range	Status	CPE String
📱App	emqx	nanomq	0.21.7	Vulnerable	cpe:2.3:a:emqx:nanomq:0.21.7:::::::*

📱

emqx / nanomq

Application

Vulnerable

Version: 0.21.7

CPE:

cpe:2.3:a:emqx:nanomq:0.21.7:*:*:*:*:*:*:*

Metrics

6.8 MEDIUMCVSS v3.1134c704f-9b21-4f2e-91b3-4a467353bcc0

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H

Attack Vector:

NETWORK

Complexity:

LOW

Privileges:

LOW

User Interaction:

REQUIRED

Confidentiality:

LOW

Integrity:

LOW

Availability:

HIGH

Scope:

UNCHANGED

🔍 Technical Details

Analysis Status

Analyzed

CVSS Details

6.8 (MEDIUM)v3.1

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

EPSS Details

0.1% (Minimal)25.2th percentile

Last updated: Oct 31, 2025

Exploitation probability within 30 days

Published Date

Apr 22, 2024 (1 year ago)

Last Modified

Jun 10, 2025 (4 months ago)

Security Weaknesses1

CWE-122

References1

NVD