← CVE Radar
CVE-2026-102560Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow.
9.8 CRITICALEPSS 0.52%Not in KEVNVD: Modified
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 8.6 | HIGH | 3.1redhat (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H |
Details
- CVE ID
- CVE-2026-102560
- Status
- Modified
- Assigner (CNA)
- redhat
- Published
- Sep 29, 2026
- Last modified
- 2026-11-04 22:17 UTC
- Weaknesses
- CWE-125 · Out-of-bounds Read
Affected Products
As published by the CNA in the CVE record.
Red HatRed Hat Enterprise Linux 100 version ranges
No version detail published.
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support0 version ranges
No version detail published.
Red HatRed Hat Enterprise Linux 90 version ranges
No version detail published.
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions0 version ranges
No version detail published.
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions0 version ranges
No version detail published.
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support0 version ranges
No version detail published.
Red HatRed Hat Enterprise Linux 60 version ranges
No version detail published.
Red HatRed Hat Enterprise Linux 70 version ranges
No version detail published.
Red HatRed Hat Enterprise Linux 80 version ranges
No version detail published.
References
- access.redhat.com https://access.redhat.com/errata/RHSA-2026:83384
- access.redhat.com https://access.redhat.com/errata/RHSA-2026:83618
- access.redhat.com https://access.redhat.com/errata/RHSA-2026:93445
- access.redhat.com https://access.redhat.com/errata/RHSA-2026:93446
- access.redhat.com https://access.redhat.com/errata/RHSA-2026:93447
- access.redhat.com https://access.redhat.com/errata/RHSA-2026:93583
- access.redhat.com https://access.redhat.com/security/cve/CVE-2026-102560
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=2543296