CVE-2026-97152: Buffer Overflow
Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
nanomsgto a version that resolves this vulnerability.Fixed in 1.2.3
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Nanomsg deployments using the WebSocket transport are exposed if they run versions from 0.5-beta through versions before 1.2.3. The provided information does not establish whether the WebSocket transport is enabled by default.
What does an attacker need to exploit the vulnerability?
An attacker needs to be able to send a WebSocket request containing a Sec-WebSocket-Version header to an affected Nanomsg WebSocket transport endpoint. The overflow is caused by an unchecked copy of that header through snprintf.
What version fixes the issue?
Upgrade Nanomsg to version 1.2.3 or later. The affected range includes all 1.x releases before 1.2.3.