Buffer overflow in Warmcat Libwebsockets
CVE-2025-11680
Out-of-bounds Write in unfilter_scanline in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to write past a heap allocated buffer possibly causing a crash, when th…
Vulnerability class: Buffer Overflow
EPSS: 0.000 (14.7th percentile) — read the EPSS interpretation.
Affected products
- Warmcat Libwebsockets — versions 4.0
Weakness classification (CWE)
References
- libwebsockets.org/git/libwebsockets/commit (patch, vendor-advisory)
- www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-11680 (third-party-advisory)