A flaw in Libsoup allows an attacker controlling the frame length to force the SoupWebsocketConnection to grow its incoming GByteArray until the length value wraps, causing a heap buffer overflow while reading frame data. This can enable arbitrary code execution or a denial‑of‑service condition. The weakness, identified as CWE-125, is a heap buffer overflow.

Red Hat Enterprise Linux 6 through 10, including 6, 7, 8, 9, and 10 distributions. All versions using the Libsoup component are affected.

The CVSS score of 8.6 indicates high severity, but the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Exploitation would likely require network access to a WebSocket endpoint that accepts arbitrary frame lengths and has an unlimited max‑incoming‑payload‑size. The vendor workaround suggests limiting the payload size and restricting exposure to trusted peers, reducing risk but not eliminating it until the issue is resolved.