Логотип exploitDog
bind:CVE-2025-11679
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-11679

Количество 4

Количество 4

ubuntu логотип

CVE-2025-11679

4 месяца назад

Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a crafted PNG file with a big height dimension.

EPSS: Низкий
nvd логотип

CVE-2025-11679

4 месяца назад

Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a crafted PNG file with a big height dimension.

EPSS: Низкий
debian логотип

CVE-2025-11679

4 месяца назад

Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets ...

EPSS: Низкий
github логотип

GHSA-q5q2-4x99-gg9p

4 месяца назад

Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a crafted PNG file with a big height dimension.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-11679

Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a crafted PNG file with a big height dimension.

0%
Низкий
4 месяца назад
nvd логотип
CVE-2025-11679

Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a crafted PNG file with a big height dimension.

0%
Низкий
4 месяца назад
debian логотип
CVE-2025-11679

Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets ...

0%
Низкий
4 месяца назад
github логотип
GHSA-q5q2-4x99-gg9p

Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to read past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a crafted PNG file with a big height dimension.

0%
Низкий
4 месяца назад

Уязвимостей на страницу