libsoup-3_0-0-3.6.6-7.1 on GA media (moderate)

libsoup-30-0-3.6.6-7.1 on GA media Announcement ID: openSUSE-SU-2026:11316-1 Rating: moderate Cross-References: CVE-2026-12478 CVSS scores: CVE-2026-12478 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L CVE-2026-12478 SUSE : 6.3...

CVE-2026-12478

creationtimestamp| type| source ---|---|--- 2026-07-14 12:24:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm77bdq4b2g 2026-07-20 19:39:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr42cxog452j 2026-07-20 19:45:00+00:00| seen|...

CVE-2026-12478

The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64MAX to trigger an OOB read in...

DEBIAN-CVE-2026-12478

The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64MAX to trigger an OOB read in...

CVE-2026-12478

The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked server-to-client frames unprotected. A malicious WebSocket server can send a crafted unmasked frame with a payload length near UINT64MAX to trigger an OOB read in...