BaseFortify

Publication date: 2025-10-20

Last updated on: 2025-10-21

Assigner: Nozomi Networks Inc.

Description

Use After Free in WebSocket server implementation in lws_handshake_server in warmcat libwebsockets may allow an attacker, in specific configurations where the user provides a callback function that handles LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to achieve denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-20

Last Modified

2025-10-21

Generated

2026-07-06

AI Q&A

2025-10-20

EPSS Evaluated

2026-07-05

NVD

CVE-2025-11677

Affected Vendors & Products

Vendor	Product	Version / Range
warmcat	libwebsockets	4.4.1
warmcat	libwebsockets	3.0
warmcat	libwebsockets	4.3.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This vulnerability is a Use After Free issue in the WebSocket server implementation within the lws_handshake_server function of the warmcat libwebsockets library. It may allow an attacker, under specific configurations where a user provides a callback function handling LWS_CALLBACK_HTTP_CONFIRM_UPGRADE, to cause a denial of service.

Impact Analysis

The vulnerability can lead to a denial of service condition, potentially disrupting the availability of services that use the affected WebSocket server implementation.

Hi! I’m here to help you understand CVE-2025-11677. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70