Warmcat vulnerabilities
We track 3 vulnerabilities in Warmcat products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 24, 2026.
Latest Warmcat vulnerabilities
- 7.3 High severity
libwebsockets: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The explo
- 7.5 High severity
libwebsocket: Stack-based Buffer Overflow
Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response
- 10.0 Critical severity
libwebsockets: Improper Restriction of Operations within the Bounds of a Memory Buffer
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access. This issue affects libwebsockets before 4.3.4 and is present in code