CVE-2021-40516

Name of the Vulnerable Software and Affected Versions WeeChat versions prior to 3.2.1

Description The issue allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that triggers an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin.

Recommendations For versions prior to 3.2.1, update to version 3.2.1 or later to resolve the issue. As a temporary workaround, consider disabling the Relay plugin until a patch is available. Restrict access to the relay-websocket.c module to minimize the risk of exploitation.