warmcat vulnerabilities

Products

• libwebsockets 6
• libwebsocket 1

Latest warmcat CVEs

Newest publication first

1. CVE-2026-78161 warmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds write

   Published 2026-08-24

   Medium·CVSS 6.9 EPSS 0.40%

   A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made pub...

2. CVE-2026-10650 warmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource consumption

   Published 2026-06-02

   Medium·CVSS 6.9 EPSS 0.43%

   A flaw has been found in warmcat libwebsockets up to 4.5.8. This issue affects the function lws_ssh_parse_plaintext of the file plugins/protocol_lws_ssh_base/sshd.c of the component SSH Protocol Handler. Executing a manipulation of the argument msg_len can lead to resource consum...

3. CVE-2025-11680 Out-of-bounds Write in libwebsockets PNG parsing

   Published 2025-10-20

   Medium·CVSS 5.9 EPSS 0.39%

   Out-of-bounds Write in unfilter_scanline in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to write past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled webs...

4. CVE-2025-11679 Out-of-bounds Read in libwebsockets PNG parsing

   Published 2025-10-20

   Medium·CVSS 5.9 EPSS 0.39%

   Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled...

5. CVE-2025-11678 Stack-based Buffer Overflow in libwebsockets DNS response parsing

   Published 2025-10-20

   High·CVSS 7.5 EPSS 0.29%

   Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id c...

6. CVE-2025-11677 Use After Free in libwebsockets WebSocket server

   Published 2025-10-20

   Medium·CVSS 6.3 EPSS 0.40%

   Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial of service.

7. CVE-2025-1866 Undefined Behavior Due to Out-of-Bounds Pointer Arithmetic in libwebsockets

   Published 2025-03-03

   Critical·CVSS 10.0 EPSS 0.43%

   Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access. This issue affects libwebsockets before 4.3.4 and is present in code built specifically...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.