CVE-2024-42645

Published: Jul 29, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of Service (DoS).

Affected (1)

Products: Flashmq: Flashmq

Flashmq

1 product

Flashmq

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Flashmq Flashmq	Version 1.14.0

Related CWEs

CWE-617

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (4)

https://github.com/halfgaar/FlashMQ

Source: cve@mitre.org

Product

https://github.com/songxpu/bug_report/blob/master/MQTT/FlashMQ/CVE-2024-42645.md

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.flashmq.org/2024/06/17/flashmq-1-15-1-released/

Source: cve@mitre.org

Release Notes

https://github.com/songxpu/bug_report/blob/master/MQTT/FlashMQ/CVE-2024-42645.md

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitThird Party Advisory

Timeline

No history available yet.