TI-2026-54362 CVE-2026-78161 · GHSA-83xp-6qr9-g946
warmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds write
Priority HIGH 70
A vulnerability was found in warmcat libwebsockets 4.5.0.
warmcat
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
warmcat records in CISA KEVNo warmcat vulnerabilities are listed in CISA KEV.
Records
7 records
TI-2026-09152 CVE-2026-10650 · GHSA-23jv-8gf4-7r88
warmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource consumption
Priority HIGH 70
A flaw has been found in warmcat libwebsockets up to 4.5.8.
TI-2025-01611 CVE-2025-1866 · GHSA-w9v7-r27g-jrmx
Undefined Behavior Due to Out-of-Bounds Pointer Arithmetic in libwebsockets
Priority MEDIUM 49
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access.
TI-2025-10708 CVE-2025-11678 · GHSA-2g39-f45w-2fcm
Stack-based Buffer Overflow in libwebsockets DNS response parsing
Priority LOW 35
Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a D…
TI-2025-10707 CVE-2025-11677 · GHSA-fpc8-25p9-jfmr
Use After Free in libwebsockets WebSocket server
Priority LOW 28
Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_H…
TI-2025-10710 CVE-2025-11680 · GHSA-7h7w-vjr9-r6m8
Out-of-bounds Write in libwebsockets PNG parsing
Priority LOW 27
Out-of-bounds Write in unfilter_scanline in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to write past a heap allocated buffer possibly causi…
TI-2025-10709 CVE-2025-11679 · GHSA-q5q2-4x99-gg9p
Out-of-bounds Read in libwebsockets PNG parsing
Priority LOW 27
Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly c…