UBUNTU-CVE-2026-102556: High severity ubuntu/libsoup2.4 vulnerability
A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap corruption or a crash upon receiving a crafted Pong.
Affected Software
Event History
Frequently Asked Questions
Which applications are exposed to this issue?
Applications using ubuntu/libsoup2.4 or ubuntu/libsoup3 are exposed when they create a SoupWebsocketConnection and register a ::pong signal handler that follows the documented GBytes API.
What does an attacker need to do to trigger the flaw?
An attacker needs to cause the application to receive a crafted incoming WebSocket Pong frame. No authentication or user interaction is indicated by the provided vector.
What is the likely impact on an affected application?
A crafted Pong can cause heap corruption or crash the application. The supplied severity vector also indicates potential low confidentiality and integrity impact, with high availability impact.