Known vulnerabilities in libwebsockets
Vendor:
libwebsockets.org
Software:
libwebsockets
Software CPE:
cpe:2.3:a:libwebsockets.org:libwebsockets:*:*:*:*:*:*:*:*
Website:
https://libwebsockets.org
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
5.0.0
4.5.8
4.4.5
4.5.7
4.5.6
4.5.5
4.3.10
4.5.4
4.4.4
4.3.9
4.5.3
4.4.3
4.3.8
4.5.2
4.5.1
4.5.0
4.4.2
4.3.7
4.4.1
4.4.0
4.3.6
4.3.5
4.3.4
4.3.3
4.3.2
4.3.1
4.3.0
4.2.2
4.2.1
4.1.5
4.1.3
4.1.2
4.1.1
4.1.0
4.0.21
4.0.19
4.0.18
4.0.17
4.0.16
4.0.15
4.0.13
4.0.12
4.0.10
4.0.9
4.0.7
4.0.6
4.0.5
4.0.4
4.0.3
4.0.2
4.0.1
4.0.08
4.0.0
3.2.3
2.2.2
2.0.0
1.7.9
1.7.8
1.7.6
1.7.3
1.7.2
1.7.0
1.6.3
1.6.2
1.6.1
1.5.1
4.2.0
4.1.6
4.1.4
1.7.7
1.7.5
1.7.4
1.7.1
2.0.3
2.0.1
2.2.0
2.1.1
2.4.0
2.3.0
2.2.1
4.0.20
2.4.2
2.4.1
3.0.1
3.2.1
3.2.0
3.2.2
3.1.0
1.4
2.1.0
3.0.0
2.0.2
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU117948 - Stack-based buffer overflow CVE-2025-11678 |
CWE-121 | High | - | 03.11.2025 |
SB2025110358 SB2025110362 SB2025120969 and 1 more |
||
| #VU117947 - Use After Free CVE-2025-11677 |
CWE-416 | Medium | - | 03.11.2025 |
SB2025110358 SB2025110362 SB2026021228 |
||
| #VU117946 - Out-of-bounds read CVE-2025-11679 |
CWE-125 | Medium | - | 03.11.2025 |
SB2025110358 |
||
| #VU117945 - Out-of-bounds write CVE-2025-11680 |
CWE-787 | High | - | 03.11.2025 |
SB2025110358 |
||
| #VU117944 - Memory corruption CVE-2025-1866 |
CWE-119 | Medium | 4.3.5, 4.4.0 | 03.11.2025 |
SB2025110357 |