cve 2026 0716

CVE-2026-0716 is a security vulnerability in libsoup, a GNOME HTTP library, affecting its WebSocket frame parser. When the maximum incoming payload size is left unset, the parser can read beyond allocated memory, leading to potential memory exposure or application crash. Red Hat assigned CWE-805 and a CVSS 3.1 score of 4.8, indicating a network-reachable issue. This tag covers discussions about the flaw, its impact on applications using libsoup, and mitigation steps. Topics include the out-of-bounds read mechanism, affected configurations, and patching guidance for Linux distributions.