https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:45:15 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-50161 <p>libre is a generic library for real-time communications with asynchronous input and output support. Prior to 4.8.1, the websock_decode() function in src/websock/websock.c contains an integer overflow when validating a masked WebSocket frame that uses the 64-bit extended length encoding. The expression 4 + hdr-&gt;len can wrap when hdr-&gt;len is close to UINT64_MAX, causing the mbuf_get_left() bounds check to pass. The subsequent XOR unmasking loop then writes beyond the heap buffer. Applications using websock_accept() or websock_accept_proto() to implement a WebSocket server are affected, and exploitation can cause attacker-controlled heap corruption or denial of service after the HTTP WebSocket upgrade handshake. This issue is fixed in version 4.8.1.</p> <p>libre is a generic library for real-time communications with asynchronous input and output support. Prior to 4.8.1, the websock_decode() function in src/websock/websock.c contains an integer overflow when validating a masked WebSocket frame that uses the 64-bit extended length encoding. The expression 4 + hdr-&gt;len can wrap when hdr-&gt;len is close to UINT64_MAX, causing the mbuf_get_left() bounds check to pass. The subsequent XOR unmasking loop then writes beyond the heap buffer. Applications using websock_accept() or websock_accept_proto() to implement a WebSocket server are affected, and exploitation can cause attacker-controlled heap corruption or denial of service after the HTTP WebSocket upgrade handshake. This issue is fixed in version 4.8.1.</p> https://db.gcve.eu/vuln/fkie_cve-2026-50161 https://db.gcve.eu/vuln/ubuntu-cve-2026-50161 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libre, Ubuntu:18.04:LTS: libre, Ubuntu:20.04:LTS: libre, Ubuntu:22.04:LTS: libre, Ubuntu:24.04:LTS: libre, Ubuntu:26.04:LTS: libre</p> <p>libre is a generic library for real-time communications with asynchronous input and output support. Prior to 4.8.1, the websock_decode() function in src/websock/websock.c contains an integer overflow when validating a masked WebSocket frame that uses the 64-bit extended length encoding. The expression 4 + hdr-&gt;len can wrap when hdr-&gt;len is close to UINT64_MAX, causing the mbuf_get_left() bounds check to pass. The subsequent XOR unmasking loop then writes beyond the heap buffer. Applications using websock_accept() or websock_accept_proto() to implement a WebSocket server are affected, and exploitation can cause attacker-controlled heap corruption or denial of service after the HTTP WebSocket upgrade handshake. This issue is fixed in version 4.8.1.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libre, Ubuntu:18.04:LTS: libre, Ubuntu:20.04:LTS: libre, Ubuntu:22.04:LTS: libre, Ubuntu:24.04:LTS: libre, Ubuntu:26.04:LTS: libre</p> <p>libre is a generic library for real-time communications with asynchronous input and output support. Prior to 4.8.1, the websock_decode() function in src/websock/websock.c contains an integer overflow when validating a masked WebSocket frame that uses the 64-bit extended length encoding. The expression 4 + hdr-&gt;len can wrap when hdr-&gt;len is close to UINT64_MAX, causing the mbuf_get_left() bounds check to pass. The subsequent XOR unmasking loop then writes beyond the heap buffer. Applications using websock_accept() or websock_accept_proto() to implement a WebSocket server are affected, and exploitation can cause attacker-controlled heap corruption or denial of service after the HTTP WebSocket upgrade handshake. This issue is fixed in version 4.8.1.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-50161