CVE-2025-65503
Use after free in endpoint destructors in Redboltz async_mqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Use after free in endpoint destructors in Redboltz async_mqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between io_context and endpoint objects.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report github.com