libwebsockets vulnerabilities

2 known vulnerabilities in libwebsockets from Warmcat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  libwebsockets: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-78161Aug 24, 2026Warmcat

  A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The explo

• 10.0 Critical severity

  libwebsockets: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2025-1866Mar 3, 2025Warmcat

  Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access. This issue affects libwebsockets before 4.3.4 and is present in code