CVE-2018-8531

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge.

Score

CVSS 3.0 8.8 High

Status

Modified - secure@microsoft.com

Published

2018-10-10

Last modified

2024-08-05

Weaknesses

CWE-787

Affected products

• Azure Internet Of Things Edge (Microsoft)
• Azure Iot Edge (Microsoft)
• Csharp Software Development Kit (Microsoft)
• Hub Device Client Sdk (Microsoft)

References

• http://www.securityfocus.com/bid/105472
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8531