Denial of Service Vulnerability in WeeChat by Fritigern
CVE-2021-40516

7.5HIGH

Key Information:

Vendor: Weechat
Status: Weechat
Vendor: CVE Published:; 5 September 2021

What is CVE-2021-40516?

WeeChat, prior to version 3.2.1, is susceptible to a denial of service attack due to an out-of-bounds read vulnerability. Remote attackers can exploit this flaw by sending carefully crafted WebSocket frames to the application. When processed, these frames can trigger a crash in the Relay plugin, affecting the overall functionality of the software.