Unbounded Buffering Vulnerability in Restbed WebSocket Implementation
CVE-2026-103472
8.7HIGH
What is CVE-2026-103472?
The vulnerability in the Restbed WebSocket implementation allows remote unauthenticated attackers to send excessively large frame sizes, causing the server to buffer payload data without limits. This unbounded buffering can lead to memory exhaustion, ultimately crashing the server and resulting in a denial of service. The impact of this vulnerability underscores the need for secure buffer management and validation of payload sizes to prevent resource abuse.
Affected Version(s)
restbed 0 <= 5.0.0