Threat Intelligence Database

CVE-2026-115417 is a vulnerability in the aws-c-mqtt library's MQTT 3.1.1 compatibility adapter that involves memory allocation with an excessive size value. This flaw could allow a remote actor to cause a denial of service (DoS) of the client process. The affected versions are aws-c-mqtt versions from 0.9.1 up to but not including 0.16.2. The vulnerability was disclosed by AWS in an important security bulletin requiring attention. No information about available patches or exploits in the wild is provided.

CVE-2026-115417 is a high-severity vulnerability in the AWS aws-c-mqtt library before version 0.16.2. It involves memory allocation with an excessive size value in the MQTT 3.1.1 compatibility adapter, which could allow a remote attacker to cause a denial of service (DoS) of the client application. The issue is fixed in aws-c-mqtt version 0.16.2 and later. Users should upgrade to these versions or to an AWS Common Runtime or AWS IoT Device SDK release that includes the fix.