Heap Buffer Overflow in libsoup WebSocket Connection
CVE-2026-102558
8.6HIGH
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 29 September 2026
What is CVE-2026-102558?
A vulnerability exists in libsoup's handling of incoming payloads for WebSocket connections. When the maximum incoming payload size is set to unlimited (0), an attacker can manipulate frame lengths leading to excessive growth of the SoupWebsocketConnection's GByteArray. This behavior can result in a heap buffer overflow during the processing of frame data, allowing an attacker potentially to execute arbitrary code or cause application crashes.
Affected Version(s)
Red Hat Enterprise Linux 10 0:3.6.5-3.el10_2.20
Red Hat Enterprise Linux 8 0:2.62.3-19.el8_10
Red Hat Enterprise Linux 8 0:2.62.3-19.el8_10
References
CVSS V3.1
Score:
8.6
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Hongduo Zhao for reporting this issue.