Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-102557

Опубликовано: 10 окт. 2026
Источник: msrc
CVSS3: 8.6
EPSS Низкий

Описание

Libsoup: libsoup: heap buffer overflow during websocket message reassembly

EPSS

Процентиль: 41%
0.00467
Низкий

8.6 High

CVSS3

Связанные уязвимости

CVSS3: 8.6
ubuntu
около 1 месяца назад

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used the full length, leading to heap corruption or a crash.

CVSS3: 8.6
redhat
2 месяца назад

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used the full length, leading to heap corruption or a crash.

CVSS3: 8.6
nvd
около 1 месяца назад

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used the full length, leading to heap corruption or a crash.

CVSS3: 8.6
debian
около 1 месяца назад

A flaw was found in libsoup. When reassembling fragmented WebSocket me ...

CVSS3: 8.6
github
около 1 месяца назад

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used the full length, leading to heap corruption or a crash.

EPSS

Процентиль: 41%
0.00467
Низкий

8.6 High

CVSS3