Threats tagged 'ghsa-fc8r-xmg7-v58h'

A heap buffer overflow vulnerability (CVE-2026-102557) exists in libsoup2.4 during the reassembly of fragmented WebSocket messages. This flaw allows a remote unauthenticated WebSocket peer to cause heap corruption or a crash by not properly limiting the total message size. The vulnerability can lead to denial of service or potential exposure of memory contents. Red Hat has issued an important security advisory with updates addressing this and related heap buffer overflow issues in libsoup. The update is available for Red Hat Enterprise Linux 9 and its variants.