Memory Buffer Operations Vulnerability in Warmcat Libwebsockets
CVE-2025-1866

10CRITICAL

Key Information:

Vendor

Warmcat

Status
Libwebsockets
Vendor
CVE Published:
3 March 2025

What is CVE-2025-1866?

A vulnerability in Warmcat's libwebsockets permits improper handling of memory boundaries, leading to potential pointer manipulation. This issue can result in out-of-bounds memory access, especially in configurations where specific CMake settings are adjusted. Users may experience unintended memory corruption or unpredictable software behavior. This vulnerability mainly affects builds targeting the Win32 platform and remains dormant unless specific conditions are manipulated. The affected versions include libwebsockets prior to 4.3.4.

Affected Version(s)

libwebsockets 0

References

https://github.com/warmcat/libwebsockets/commit/3f7c79fd5...
patch

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

TITAN Team (titancaproject@gmail.com)
.