In Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their length exceeds 65535 bytes. This may lead to unexpected content in packets sent to …

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-10543 · Microsoft / collected KEV context

EUVD-2025-200211

GHSA-32fw-gq77-f2f2

GO-2025-4173

cve-program · CVE-2025-10543

• https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/254

euvd · EUVD-2025-200211

• https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/254

nvd · CVE-2025-10543

• https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/254

osv · GHSA-32fw-gq77-f2f2

• https://nvd.nist.gov/vuln/detail/CVE-2025-10543
• https://github.com/eclipse-paho/paho.mqtt.golang/issues/730
• https://github.com/eclipse-paho/paho.mqtt.golang/pull/714
• https://github.com/alpinelinux/build-server-status/commit/e3487897db32c8c3d0287643f8384a6669e93731
• https://github.com/advisories/GHSA-32fw-gq77-f2f2
• https://github.com/eclipse-paho/paho.mqtt.golang
• https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/254

osv · GO-2025-4173

• https://github.com/advisories/GHSA-32fw-gq77-f2f2
• https://github.com/alpinelinux/build-server-status/commit/e3487897db32c8c3d0287643f8384a6669e93731
• https://github.com/eclipse-paho/paho.mqtt.golang/issues/730
• https://github.com/eclipse-paho/paho.mqtt.golang/pull/714
• https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/254

No related operational record is retained in the current change model.