AZL-105540

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105540.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-105540
Upstream
  • CVE-2026-102560
Published
2026-09-29T18:17:08Z
Modified
2026-10-03T14:16:34Z
Summary
CVE-2026-102560 affecting package libsoup 3.4.4-16
Details

A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow.

References

Affected packages

Azure Linux:3 / libsoup

Package

Name
libsoup
Purl
pkg:rpm/azure-linux/libsoup

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
3.4.4-16

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105540.json"