Search: CVE-2026-102556

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.6	EPSS 0.5%	CVE-2026-102556Red Hat Enterprise Linux 10 · Access of Resource Using Incompatible Type High8.6EPSS 0.5%2026-09-29CVE Database V5CVE-2026-102556 A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap corruption or a crash upon receiving a crafted Pong. EPSS 0.5%Vulnerability	CVE Database V5	2026-09-29

Page 1 of 1 · 11 duplicate CVE records merged