CVE-2026-0716

Name of the Vulnerable Software and Affected Versions libsoup2.4, libsoup3 (affected versions not specified)

Description A flaw exists in libsoup’s WebSocket frame processing when handling incoming messages. When the maximum incoming payload size is not set to a default value, the library may read memory outside the intended bounds, potentially leading to memory exposure or a crash. Applications utilizing libsoup’s WebSocket support with this configuration may be affected.

Recommendations Set the max incoming payload size parameter to a value greater than 0. Update libsoup to the latest available version.