Uncontrolled resource allocation in the VES Collector component of the O-RAN-SC SMO OAM stack (2025-06-10 snapshot) lets an authenticated, low-privilege remote user exhaust collector resources and degrade availability of the OAM event-streaming service. The impact is availability-only and partial (CVSS 4.0 score 2.1; assessed CVSS 3.1 AV:N/AC:L/PR:L/UI:N/C:N/I:N/A:L), with no confidentiality or integrity effect. Publicly available exploit code exists and was published alongside an upstream bug report (Jira SMO-202) that the project has not responded to, so no vendor patch or fixed version is available; the issue is not reported as confirmed actively exploited (CISA KEV), and overall risk is low.
The NanoMQ MQTT client (versions prior to 0.24.14) can be hung and driven into a CPU- and memory-consuming infinite loop by a malicious or compromised MQTT broker that replies to a client UNSUBSCRIBE exchange with a malformed packet containing a zero-length topic followed by trailing data. The defect is CWE-835 in nni_mqtt_msg_decode_unsubscribe() (nng/src/supplemental/mqtt/mqtt_codec.c), where a failed read_uint16() during topic counting leaves buf.curpos unchanged while topic_count keeps incrementing, so the parse loop never terminates; when automatic reconnection is enabled the client re-enters the same state repeatedly, producing a sustained denial of service against the client itself. The independent assessment scores this CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - a low-impact, low-priority availability issue with an inverted threat model, since the victim is the client and the attacker must supply the hostile endpoint; no public exploit code was identified at time of analysis and the issue is not in CISA KEV. Vendor-released patch: 0.24.14.