CVE-2026-73255: Mongoose Mqtt Prop Bounds Check Oob

Flawed bounds check: relative MQTT property offset is checked against props_start + props_size instead of props_size, allowing out-of-bounds reads.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-73255-mongoose-mqtt-prop-bounds-check-oob --engine opengrep

Description

Flawed bounds check: relative MQTT property offset is checked against props_start + props_size instead of props_size, allowing out-of-bounds reads.