CyberRota Analysis
AI-GeneratedA vulnerability in the LECP CBOR Recording component of warmcat libwebsockets version 4.5.0 allows for an out-of-bounds write due to improper handling in the report_raw_cbor function, which can be exploited remotely. This high-severity flaw poses a significant risk as it could lead to arbitrary code execution or system compromise. Organizations using this library should prioritize applying the available patch to mitigate potential attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function report_raw_cbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be used. The patch is identified as 1d44554a1bb262db63ff4e240152a9deecd99054. It is best practice to apply a patch to resolve this issue.