bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Thursday, October 22, 2026

aws-c-mqtt Memory Allocation Vulnerability Requires Update

aws-c-mqtt versions 0.9.1 through 0.16.2 contain a memory allocation flaw (CVE-2026-115417) in the MQTT 3.1.1 adapter that could let remote attackers trigger denial of service. If you're using AWS IoT Device SDK for C++ v2 or AWS Common Runtime with affected versions, you need to upgrade immediately to patch this vulnerability.

source: [aws/security-bulletin]