Skip to content
OpenAdvisories

Package · Debian

libwebsockets

8 known vulnerabilities.

5 results · Clear filters · Feed

  • High 8.1
    CVE-2026-114550 Public exploit

    libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability

    libwebsockets MQTT Protocol PUBACK Packet Handling Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to expl…

  • High 7.5

    Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via …

  • High 7.5

    libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allo…

  • High 7.3

    warmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds write

    A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The expl…

  • High 7.5

    Stack-based Buffer Overflow in libwebsockets DNS response parsing

    Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response…