Out-of-bounds Read in Warmcat Libwebsockets
CVE-2025-11679
Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly causing a crash, whe…
Vulnerability class: Buffer Overflow
EPSS: 0.000 (14.7th percentile) — read the EPSS interpretation.
Affected products
- Warmcat Libwebsockets — versions 4.0
Weakness classification (CWE)
References
- libwebsockets.org/git/libwebsockets/commit (patch, vendor-advisory)
- www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-11679 (third-party-advisory)