Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer than the maximum.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libwebsockets | Nov 19, 2025 | Nov 19, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libwebsockets | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libwebsockets | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libwebsockets | Mar 10, 2026 | Mar 10, 2026 |
| Ubuntu | — | Upgrade libwebsockets16Upgrade libwebsockets15 (Ubuntu Pro)Upgrade libwebsockets19t64 (Ubuntu Pro) | Feb 13, 2026 | Feb 11, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub