Vulnerability · Published Nov 25, 2025 · Assigned by GitHub_M

CVE-2025-65953NanoMQ UAF of retain message due to invalid MQTTV5 properties

Medium 6.0

In plain English

A medium-severity use-after-free in nanomq from nanomq. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 4.0)6.0Medium

Exploit odds (30 days)0.2%top 85.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to version 0.22.5, a Heap-Use-After-Free (UAF) vulnerability exists in the TCP transport component of NanoMQ, which relies on the underlying NanoNNG library (specifically in src/sp/transport/mqtt/broker_tcp.c). The vulnerability is due to improper resource management and premature cleanup of message and pipe structures under specific malformed MQTTV5 retain message traffic conditions. This issue has been patched in version 0.22.5.

Affected products (as reported)

Vendor	Product	Versions
nanomq	nanomq	< 0.22.5

Weakness: CWE-416 · Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

References

https://github.com/nanomq/nanomq/security/advisories/GHSA-r95p-wjm8-2qxr x_refsource_CONFIRM