https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:17:47 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-78161 <p><strong>Affected:</strong> Alpaquita:23: libwebsockets, Alpaquita:25: libwebsockets, Alpaquita:stream: libwebsockets</p> <p><strong>Affected:</strong> Alpaquita:23: libwebsockets, Alpaquita:25: libwebsockets, Alpaquita:stream: libwebsockets</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-78161 https://cve.radiocsirt.org/vuln/euvd-2026-358234 EUVD-2026-358234 https://cve.radiocsirt.org/vuln/euvd-2026-358234 https://cve.radiocsirt.org/vuln/fkie_cve-2026-78161 <p>A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be used. The patch is identified as 1d44554a1bb262db63ff4e240152a9deecd99054. It is best practice to apply a patch to resolve this issue.</p> <p>A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be used. The patch is identified as 1d44554a1bb262db63ff4e240152a9deecd99054. It is best practice to apply a patch to resolve this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-78161 https://cve.radiocsirt.org/vuln/ghsa-83xp-6qr9-g946 <p>A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be used. The patch is identified as 1d44554a1bb262db63ff4e240152a9deecd99054. It is best practice to apply a patch to resolve this issue.</p> <p>A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be used. The patch is identified as 1d44554a1bb262db63ff4e240152a9deecd99054. It is best practice to apply a patch to resolve this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-83xp-6qr9-g946 https://cve.radiocsirt.org/vuln/oesa-2026-4076 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libwebsockets, openEuler:24.03-LTS-SP3: libwebsockets, openEuler:24.03-LTS-SP4: libwebsockets, openEuler:20.03-LTS-SP4: libwebsockets, openEuler:22.03-LTS-SP4: libwebsockets</p> <p>Libwebsockets (LWS) is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fix(es):</p> <p>libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the parsing of HTTP/2 HPACK path header. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-31036.(CVE-2026-19773)</p> <p>A vulnerability classified as critical was found in warmcat libwebsockets 4.5.0. The vulnerability is in the function report_raw_cbor in lib/misc/lecp.c when handling LECP CBOR recordings. This issue allows an out-of-bounds write (CWE-787), which could affect confidentiality, integrity, and availability. A proof-of-concept exploit is available.(CVE-2026-78161)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: libwebsockets, openEuler:24.03-LTS-SP3: libwebsockets, openEuler:24.03-LTS-SP4: libwebsockets, openEuler:20.03-LTS-SP4: libwebsockets, openEuler:22.03-LTS-SP4: libwebsockets</p> <p>Libwebsockets (LWS) is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fix(es):</p> <p>libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of libwebsockets. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the parsing of HTTP/2 HPACK path header. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-31036.(CVE-2026-19773)</p> <p>A vulnerability classified as critical was found in warmcat libwebsockets 4.5.0. The vulnerability is in the function report_raw_cbor in lib/misc/lecp.c when handling LECP CBOR recordings. This issue allows an out-of-bounds write (CWE-787), which could affect confidentiality, integrity, and availability. A proof-of-concept exploit is available.(CVE-2026-78161)</p> https://cve.radiocsirt.org/vuln/oesa-2026-4076 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-78161 <p><strong>Affected:</strong> Ubuntu:Pro:24.04:LTS: libwebsockets, Ubuntu:26.04:LTS: libwebsockets</p> <p>A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be used. The patch is identified as 1d44554a1bb262db63ff4e240152a9deecd99054. It is best practice to apply a patch to resolve this issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:24.04:LTS: libwebsockets, Ubuntu:26.04:LTS: libwebsockets</p> <p>A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be used. The patch is identified as 1d44554a1bb262db63ff4e240152a9deecd99054. It is best practice to apply a patch to resolve this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-78161