CVE-2026-103472CWE-770denial-of-service

CVE-2026-103472

High · published September 30, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
37.3
In the wild
Unconfirmed
What it is

restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers the payload without size limits in an unbounded stream buffer. Remote unauthenticated attackers can declare large frame sizes and stream payload data to exhaust server memory, causing denial of service through process crash.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00441 · 37.3th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-09-30T22:18Z
References (4)
https://github.com/Corvusoft/restbed · [email protected]https://github.com/Corvusoft/restbed/blob/e1227a297ce6d4e9f78222456507b29bb8ab77e9/src/corvusoft/restbed/detail/web_socket_impl.cpp#L117 · [email protected]https://github.com/Corvusoft/restbed/issues/558 · [email protected]https://www.vulncheck.com/advisories/restbed-through-5.0.0-websocket-memory-exhaustion-via-unbounded-frame-buffering · [email protected]
EPSS history
Timeline
  • 02 OCT 03:41Z
    EPSS moved — → 1%
    epss
  • 30 SEP 17:22Z
    restbed through 5.0.0 WebSocket Memory Exhaustion via Unbounded Frame Buffering
    cvelistv5