Skip to content
OpenAdvisories

Vendor

warmcat

7 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.3

    warmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds write

    A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The expl…

  • High 7.5

    Stack-based Buffer Overflow in libwebsockets DNS response parsing

    Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response…