Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-11678

Stack-based Buffer Overflow in libwebsockets DNS response parsing

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Nozomi

Description

Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer than the maximum.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

warmcat libwebsocket

Default version status: unaffected

  • 4.0 to ≤ 4.4.2affected
  • 4.0 to ≤ 4.3.6affected

References