Back to search
CVE-2025-11679
Published: Oct 20, 2025
Modified: Oct 20, 2025
PUBLISHED
Description
Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a crafted PNG file with a big height dimension.
| Vendor | Product | Versions |
|---|---|---|
warmcat | libwebsockets | affected 4.0 - <= 4.4.2affected 4.0 - <= 4.3.6 |
Weaknesses (CWE)
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now