CVE-2025-11680PoC

LOWCVSS 5.9 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Prioritize remediation for affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Out-of-bounds Write in unfilter_scanline in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to write past a heap allocated buffer possibly causing a crash, when the user visits an attacker controlled website that contains a crafted PNG file with a big width value that causes an integer overflow which value is used for determining the size of a heap allocation.

Back to dashboard

3.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-787

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

Public PoC and exploit tooling are both present
1 mentions across 1 observed day

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

PoC

1100.0%

Full discourse1 post

Obi Ebuka David@ObiEbukaDavid92d
PoC
Thought my engine found a 0-day. 48 hrs in, it autonomously wrote a harness for a PNG decoder and tripped a heap overflow: crafted width overflows the buffer-size math, malloc too small, unfilter_scanline writes past it. 70-byte repro. I checked. It's CVE-2025-11680. An n-day
Post summary
The post announces the discovery of CVE-2025-11680, detailing how a Docker engine built a harness for a PNG decoder that triggers a heap overflow using a 70‑byte test case.
00010237
578 followersView on X

Explore more

Back to dashboard