Summary
[2.62.3-19]
- CVE-2026-102557 libsoup: libsoup: Heap buffer overflow during WebSocket
message reassembly
[2.62.3-18]
- CVE-2026-102558 libsoup: libsoup: Heap buffer overflow during WebSocket
receive-buffer growth
[2.62.3-17]
- CVE-2026-102556 libsoup: libsoup: Heap buffer overflow from WebSocket Pong
signal type confusion
[2.62.3-16]
- CVE-2026-102559 libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking
client-frame masking
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | libsoup | 0:2.62.3-19.el8_10 |
| Oracle Linux · 8 | libsoup-devel | 0:2.62.3-19.el8_10 |
Vulnerabilities 4
-
High 8.6
Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the do…
-
High 8.6
Libsoup: libsoup: heap buffer overflow during websocket message reassembly
A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation …
-
High 8.6
Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame …
-
High 8.6
Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer o…