CVE-2019-17210

A denial-of-service issue was discovered in the MQTT library in Arm Mbed OS 2017-11-02. The function readMQTTLenString() is called by the function MQTTDeserialize_publish() to get the length and content of the MQTT topic name. In the function readMQTTLenString(), mqttstring->lenstring.len is a part of user input, which can be manipulated. An attacker can simply change it to a larger value to invalidate the if statement so that the statements inside the if statement are skipped, letting the value of mqttstring->lenstring.data default to zero. Later, curn is accessed, which points to mqttstring->lenstring.data. On an Arm Cortex-M chip, the value at address 0x0 is actually the initialization value for the MSP register. It is highly dependent on the actual firmware. Therefore, the behavior of the program is unpredictable from this time on.

• CWE-20

• https://github.com/ARMmbed/mbed-os/issues/11802Issue Tracking, Third Party Advisory
• https://github.com/ARMmbed/mbed-os/issues/11802Issue Tracking, Third Party Advisory

Published

Nov 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17203TeamPass 2.1.27.36 allows Stored XSS at the Search page by s…5.4
• CVE-2019-17204TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Kn…5.4
• CVE-2019-17205TeamPass 2.1.27.36 allows Stored XSS by placing a payload in…6.1
• CVE-2019-17206Uncontrolled deserialization of a pickled object in models.p…9.8
• CVE-2019-17207A reflected XSS vulnerability was found in includes/admin/ta…5.4
• CVE-2019-1721A vulnerability in the phone book feature of Cisco Expresswa…6.5
• CVE-2019-17211An integer overflow was discovered in the CoAP library in Ar…9.8
• CVE-2019-17212Buffer overflows were discovered in the CoAP library in Arm …9.8
• CVE-2019-17213The WebARX plugin 1.3.0 for WordPress has unauthenticated st…6.1
• CVE-2019-17214The WebARX plugin 1.3.0 for WordPress allows firewall bypass…7.5
• CVE-2019-17215An issue was discovered on V-Zug Combi-Steam MSLQ devices be…9.8
• CVE-2019-17216An issue was discovered on V-Zug Combi-Steam MSLQ devices be…9.8