← Database

CVE-2021-40516

HIGH CVSS: 7.5 Published: 2021-09-05 Modified: 2026-06-17

Description

WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin.

Affected Platforms

Debian Debian LinuxWeechat Weechat

Weakness Type

CWE-125

References