An out-of-bounds read vulnerability in FreeRTOS coreMQTT 5.0.0 could lead to a denial-of-service condition via unauthenticated network access.

This vulnerability is an out-of-bounds read (CWE-125) triggered by improper validation of MQTT v5 packets. The vulnerability is exploitable by an unauthenticated remote attacker who can send crafted network packets to the affected service.

Successful exploitation of this vulnerability results in a high impact on system availability, as the out-of-bounds read can cause the application to crash. Given the CVSS score of 7.5, it represents a significant risk to the stability of embedded systems relying on coreMQTT. While data confidentiality is not impacted, the potential for service disruption poses a moderate business risk for time-critical IoT or industrial control applications.

Immediate Action: Update FreeRTOS coreMQTT to version 5.0.1 or later to implement the necessary bounds validation.

Proactive Monitoring: Monitor device logs and network traffic for malformed MQTT packets or unexpected application restarts that may indicate exploitation attempts.

Compensating Controls: Deploy network-level traffic inspection to drop malformed or non-compliant MQTT v5 packets before they reach the embedded target.

Public Exploit Available: false

This vulnerability presents a clear risk to service availability. Organizations utilizing FreeRTOS coreMQTT should prioritize testing and deploying the 5.0.1 update immediately to ensure robust bounds checking and prevent potential denial-of-service scenarios.