CVE-2018-17614

CVE-2018-17614 is a critical remote code execution vulnerability affecting Losant Arduino MQTT Client versions prior to V2.7. The flaw stems from insufficient length validation during the parsing of MQTT PUBLISH packets, leading to a stack-based buffer overflow. This allows an unauthenticated attacker on the same network to execute arbitrary code with high impact on confidentiality, integrity, and availability. While rated with a CVSS score of 8.8 (High), there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.