| Package | Affected versions | Patched versions |
|---|---|---|
| libsoup | < 3.7.3 | 3.7.3 |
A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap corruption or a crash upon receiving a crafted Pong.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free