A flaw was discovered in the libsoup library used for WebSocket handling. When reassembling fragmented messages, libsoup failed to cap the total message size against the underlying buffer limits. This allowed a remote peer to transmit fragments that caused size truncation while the implementation continued to use the full length, leading to heap corruption or a crash. The impact is potential arbitrary memory corruption or denial of service.

Affected systems include Red Hat Enterprise Linux releases 6 through 10, which rely on the vulnerable libsoup library in their default packages. No specific version numbers are listed, so all installations using the unpatched version of libsoup on these releases are potentially impacted.

The CVSS score of 8.6 indicates a high severity attack that can lead to heap corruption or a crash on the affected host. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, so the current publicly known exploitation likelihood is unclear. However, the description indicates that a remote peer can send fragmented WebSocket messages designed to cause size truncation, which infers that the attack vector is remote via WebSocket connections. The lack of a buffer size validation allows an attacker to corrupt memory or trigger a crash, potentially causing a denial of service or compromising system integrity.