aws-c-mqtt Memory Allocation Vulnerability Requires Update
aws-c-mqtt versions 0.9.1 through 0.16.2 contain a memory allocation flaw (CVE-2026-115417) in the MQTT 3.1.1 adapter that could let remote attackers trigger denial of service. If you're using AWS IoT Device SDK for C++ v2 or AWS Common Runtime with affected versions, you need to upgrade immediately to patch this vulnerability.
source: [aws/security-bulletin]