Threats tagged 'ghsa-6jpc-6452-qwq2'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.2%	CVE-2026-12478The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) Medium4.8EPSS 0.2%2026-07-14GCVE DatabaseCVE-2026-12478 CVE-2026-12478 is a medium severity vulnerability in libsoup's WebSocket frame processing that occurs when the maximum incoming payload size is unset or set to zero. This can cause out-of-bounds memory reads, potentially leading to memory exposure or application crashes. The vulnerability requires a non-default configuration and is not enabled by default in typical deployments. It affects certain versions of libsoup used in SUSE and Red Hat products. EPSS 0.2%Report on CVE-2026-12478 Vulnerability CWE-125 #ghsa-6jpc-6452-qwq2	GCVE Database	2026-07-14

Page 1 of 1