Out-of-bounds Read in Warmcat Libwebsockets
CVE-2025-11679
Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a crafted PNG file with a big height dimension.
Vulnerability class: Buffer Overflow
Published · last modified .
EPSS exploit prediction
EPSS: 0.004 (31.0th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 31st percentile — 31.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: +0.000
Affected products
- Warmcat Libwebsockets — versions 4.0
Weakness classification (CWE)
References
- libwebsockets.org/git/libwebsockets/commit (vendor-advisory, patch)
- www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-11679 (third-party-advisory)