01 Record

CVE-2026-63495

Libevent: Unbounded memory accumulation in WebSocket server via fragmented frames

HighPUBLISHEDCNA: GitHub_M

Base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

02 Description

Libevent: Unbounded memory accumulation in WebSocket server via fragmented frames

Published

2026-08-20 17:49Z1 DAY AGO

Last updated

2026-08-20 19:17Z1 DAY AGO

Reserved

2026-07-16

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

SSVC decision

ExploitationpocAutomatableyesTechnical Impactpartial

Data version

5.2

Document digest

39fb6db6ddbc057cd0d309858194eab0ada77f6f4f6567a5ccacca29402e0868

VendorProductVersionsPlatforms

libeventlibevent>= 2.2.0-alpha-dev, < 2.2.2-alpha—