TI-2026-54362 CVE-2026-78161 · GHSA-83xp-6qr9-g946
warmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds write
Priority HIGH 70
A vulnerability was found in warmcat libwebsockets 4.5.0.
Vulnerabilities
7 records
TI-2026-09152 CVE-2026-10650 · GHSA-23jv-8gf4-7r88
warmcat libwebsockets SSH Protocol sshd.c lws_ssh_parse_plaintext resource consumption
Priority HIGH 70
A flaw has been found in warmcat libwebsockets up to 4.5.8.
TI-2025-10710 CVE-2025-11680 · GHSA-7h7w-vjr9-r6m8
Out-of-bounds Write in libwebsockets PNG parsing
Priority LOW 27
Out-of-bounds Write in unfilter_scanline in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to write past a heap allocated buffer possibly causi…
TI-2025-10709 CVE-2025-11679 · GHSA-q5q2-4x99-gg9p
Out-of-bounds Read in libwebsockets PNG parsing
Priority LOW 27
Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly c…
TI-2025-10708 CVE-2025-11678 · GHSA-2g39-f45w-2fcm
Stack-based Buffer Overflow in libwebsockets DNS response parsing
Priority LOW 35
Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a D…
TI-2025-10707 CVE-2025-11677 · GHSA-fpc8-25p9-jfmr
Use After Free in libwebsockets WebSocket server
Priority LOW 28
Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_H…
TI-2025-01611 CVE-2025-1866 · GHSA-w9v7-r27g-jrmx
Undefined Behavior Due to Out-of-Bounds Pointer Arithmetic in libwebsockets
Priority MEDIUM 49
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access.