Libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser that can be exploited remotely to cause a denial of service (CVE-2026-95114). This vulnerability is addressed in version 4.3.3-9.oe2403sp4. The issue has a high severity rating with a CVSS score of 7.5, indicating a significant impact on availability but no impact on confidentiality or integrity.