Most recent entries from all

fkie_cve-2026-95115

2026-11-05T05:52:42.391306+00:00

Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser

GHSA-9f4q-6c78-chwx

2026-11-05T05:52:42.391460+00:00

Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser

OESA-2026-4613 — libwebsockets security update

2026-11-05T05:52:42.391492+00:00

Affected: openEuler:24.03-LTS-SP3: libwebsockets

Libwebsockets (LWS) is a flexible, lightweight pure C library for implementing modern network protocols easily with a tiny footprint, using a nonblocking event loop. Security Fix(es):

libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service(CVE-2026-95114)

Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser(CVE-2026-95115)

UBUNTU-CVE-2026-95115

2026-11-05T05:52:42.391535+00:00

Affected: Ubuntu:Pro:16.04:LTS: libwebsockets, Ubuntu:Pro:18.04:LTS: libwebsockets, Ubuntu:Pro:20.04:LTS: libwebsockets, Ubuntu:Pro:22.04:LTS: libwebsockets, Ubuntu:Pro:24.04:LTS: libwebsockets, Ubuntu:26.10: libwebsockets, Ubuntu:Pro:26.04:LTS: libwebsockets

Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser