CVE-2025-11680: Out-of-bounds Write in libwebsockets PNG parsing
Out-of-bounds Write in unfilterscanline in warmcat libwebsockets allows, when the LWSWITHUPNG flag is enabled during compilation and the HTML display stack is used, to write past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a crafted PNG file with a big width value that causes an integer overflow which value is used for determining the size of a heap allocation.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11680?
CVE-2025-11680 is considered to be a high severity vulnerability due to the potential for crashes and exploitation.
How do I fix CVE-2025-11680?
To fix CVE-2025-11680, ensure that the LWS_WITH_UPNG flag is not enabled during the compilation of warmcat libwebsockets or apply the latest patches provided by the maintainers.
What type of vulnerability is CVE-2025-11680?
CVE-2025-11680 is an out-of-bounds write vulnerability that can result in writing past a heap allocated buffer.
What components are affected by CVE-2025-11680?
CVE-2025-11680 affects the warmcat libwebsockets library when the HTML display stack is used.
Can CVE-2025-11680 be exploited remotely?
Yes, CVE-2025-11680 can be exploited when a user visits an attacker-controlled website.