Threats tagged 'ghsa-q4x2-vf8m-46j5'

A vulnerability in libsoup's handling of WebSocket Pong frames causes a type confusion between GByteArray and GBytes in the ::pong signal. This flaw can lead to heap corruption or application crashes when an application connects a handler expecting the documented GBytes type and receives a crafted Pong frame. Red Hat has issued security updates addressing this and related heap buffer overflow issues in libsoup for Red Hat Enterprise Linux 9.