UBUNTU-CVE-2026-5680

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

uwebsockets:PerMessageDeflate: Use-of-uninitialized-value in std::__1::__function::__func<LLVMFuzzerTestOneInput::$_0, std::__1::allocator<LL

Detailed Report: https://oss-fuzz.com/testcase?key=5726045371891712 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: PerMessageDeflate Job Type: libfuzzermsanuwebsockets Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

uwebsockets:PerMessageDeflate: Use-of-uninitialized-value in slide_hash

Detailed Report: https://oss-fuzz.com/testcase?key=5629572998234112 Project: uwebsockets Fuzzing Engine: libFuzzer Fuzz Target: PerMessageDeflate Job Type: libfuzzermsanuwebsockets Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: slidehash fillwindow deflatefa...