Security
Loading…

CVE-2026-102557

HIGHCVSS 8.6
View on NVD← Back to search
Description

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used the full length, leading to heap corruption or a crash.

Timeline
Published:September 29th, 2026 5:17 PM
Last modified:November 4th, 2026 10:17 PM
CVSS Scoring

CVSS v3: 8.6 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Affected Software
From NVD CPE configuration data

Vendors

gnomeredhat

Products

libsoupenterprise_linux
Weaknesses (CWE)
CWE-125
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute