Search: CVE-2026-102560

CVE-2026-102560 is a heap buffer overflow vulnerability in the libsoup library used by Red Hat Enterprise Linux 9. It occurs when the permessage-deflate WebSocket extension compresses a very large outgoing message, causing size calculations to wrap and zlib to write beyond allocated memory. This flaw can lead to memory corruption and potential denial of service or other impacts. Red Hat has released security updates addressing this issue in libsoup packages for Red Hat Enterprise Linux 9.