Skip to content
OpenAdvisories

Product · warmcat

libwebsocket

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-11678

    Stack-based Buffer Overflow in libwebsockets DNS response parsing

    Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response…

    warmcat libwebsocket libwebsockets libwebsockets Debian Ubuntu