https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 02:45:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-369154 EUVD-2026-369154 https://cve.radiocsirt.org/vuln/euvd-2026-369154 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12478 <p>The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64_MAX to trigger an OOB read in a libsoup-based client when max_incoming_payload_size is set to 0.</p> <p>The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64_MAX to trigger an OOB read in a libsoup-based client when max_incoming_payload_size is set to 0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-12478 https://cve.radiocsirt.org/vuln/ghsa-6jpc-6452-qwq2 <p>The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64_MAX to trigger an OOB read in a libsoup-based client when max_incoming_payload_size is set to 0.</p> <p>The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64_MAX to trigger an OOB read in a libsoup-based client when max_incoming_payload_size is set to 0.</p> https://cve.radiocsirt.org/vuln/ghsa-6jpc-6452-qwq2 https://cve.radiocsirt.org/vuln/oesa-2026-3380 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: libsoup</p> <p>libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fix(es):</p> <p>The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64_MAX to trigger an OOB read in a libsoup-based client when max_incoming_payload_size is set to 0.(CVE-2026-12478)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: libsoup</p> <p>libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fix(es):</p> <p>The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64_MAX to trigger an OOB read in a libsoup-based client when max_incoming_payload_size is set to 0.(CVE-2026-12478)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3380 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11316-1 <p>libsoup-3_0-0-3.6.6-7.1 on GA media</p> <p>libsoup-3_0-0-3.6.6-7.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11316-1 https://cve.radiocsirt.org/vuln/suse-su-2026:22920-1 <p>Security update for libsoup</p> <p>Security update for libsoup</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22920-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-12478 <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup3, Ubuntu:26.04:LTS: libsoup3</p> <p>The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64_MAX to trigger an OOB read in a libsoup-based client when max_incoming_payload_size is set to 0.</p> <p><strong>Affected:</strong> Ubuntu:Pro:22.04:LTS: libsoup3, Ubuntu:24.04:LTS: libsoup3, Ubuntu:26.04:LTS: libsoup3</p> <p>The fix for CVE-2026-0716 (commit 6ff7ef0, libsoup 3.6.6) placed the integer overflow guard inside the if (masked) block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64_MAX to trigger an OOB read in a libsoup-based client when max_incoming_payload_size is set to 0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-12478