Debian/civetweb: unknown

CivetWeb (commit 4a4f0c95) contains a heap and stack buffer overflow vulnerability in the read_websocket() function that allows unauthenticated remote attackers to corrupt memory by sending compressed

Action: No fix published. Pin and monitor.

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

No fixed version in the source.

Sources

osv: DEBIAN-CVE-2026-29035#Debian:14/civetweb
https://security-tracker.debian.org/tracker/CVE-2026-29035

published 2026-08-11T21:17:35.507Z · modified 2026-09-25T09:00:08.968960089Z · JSON