Is CVE-2026-102557 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-102557?

CVE-2026-102557 has a CVSS v3 severity of HIGH (8.6).

Back

CVE-2026-102557

Description

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used the full length, leading to heap corruption or a crash.