CVE-2025-11678 – Stack-based Buffer Overflow in libwebsockets DNS response parsing

CVE ID : CVE-2025-11678

Published : Oct. 20, 2025, 2:15 p.m. | 26 minutes ago

Description : Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer than the maximum.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…