Buffer overflow in Warmcat Libwebsockets
CVE-2025-11680
Out-of-bounds Write in unfilter_scanline in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to write past a heap allocated buffer possibly causing a crash, when th…
Vulnerability class: Buffer Overflow
EPSS: 0.004 (28.8th percentile) — read the EPSS interpretation.
Affected products
- Warmcat Libwebsockets — versions 4.0
Weakness classification (CWE)
References
- prodsec@nozominetworks.com (vendor-advisory, patch)
- prodsec@nozominetworks.com (third-party-advisory)