Skip to content

Product

warmcat libwebsocket vulnerabilities

1 published CVE affecting warmcat libwebsocket, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest warmcat libwebsocket CVEs

Newest publication first

  1. CVE-2025-11678 Stack-based Buffer Overflow in libwebsockets DNS response parsing

    Published
    HighCVSS 7.5 EPSS 0.29%

    Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id c...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.