Denial of Service
A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module.
Advisories for Npm/Mqtt-Packet package
2019
Improper Restriction of Operations within the Bounds of a Memory Buffer
MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.
2016
Denial of Service
Specifically crafted MQTT packets can crash the application, making a DoS attack feasible with very little bandwidth.