Gnome Libsoup vulnerabilities

• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +8 more +10 more Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth CVE-2026-102560 Fix available 8.6 HighSeptember 29, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more Libsoup: libsoup: heap buffer overflow during websocket client-frame masking CVE-2026-102559 Fix available 8.6 HighSeptember 29, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth CVE-2026-102558 Fix available 8.6 HighSeptember 29, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 more Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding CVE-2026-102555 Fix available 8.2 HighSeptember 29, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more Libsoup: libsoup: heap buffer overflow during websocket message reassembly CVE-2026-102557 Fix available 8.6 HighSeptember 29, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 more Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion CVE-2026-102556 Fix available 8.6 HighSeptember 29, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked() CVE-2026-66338 Fix available 5.4 MediumJuly 24, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until() CVE-2026-66337 6.5 MediumJuly 24, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels CVE-2026-66339 Fix available 6.5 MediumJuly 24, 2026
• gnome libsoup, red hat enterprise linux 10, redhat enterprise linux +2 more Libsoup: heap out-of-bounds read in libsoup due to integer truncation CVE-2026-12548 Fix available 4.2 MediumJuly 21, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver CVE-2026-12549 Fix available 4.8 MediumJune 22, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +15 more +17 more Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment CVE-2026-5119 Fix available 5.9 MediumMarch 30, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: denial of service via use-after-free in soupserver during tls handshake CVE-2026-2436 Fix available 6.5 MediumMarch 26, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +5 more +7 more Libsoup: libsoup: denial of service via use-after-free in http/2 server CVE-2026-4271 Fix available 5.3 MediumMarch 17, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: http header injection and response splitting via crlf injection in content-type header CVE-2026-3634 3.9 LowMarch 17, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: header and http request injection via crlf injection CVE-2026-3633 3.9 LowMarch 17, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: http smuggling and server-side request forgery via malformed hostnames CVE-2026-3632 3.9 LowMarch 17, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: authentication bypass via digest authentication replay attack CVE-2026-3099 Fix available 5.8 MediumMarch 12, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: http request smuggling via duplicate content-length headers CVE-2026-2708 Fix available 3.7 LowFebruary 24, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources CVE-2026-2369 Fix available 6.5 MediumFebruary 16, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure CVE-2026-2443 Fix available 5.3 MediumFebruary 13, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: http request smuggling via malformed chunk headers CVE-2026-1801 Public exploitFix available 5.3 MediumFebruary 3, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: credential leakage via http redirects CVE-2026-1539 Fix available 5.8 MediumJanuary 28, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: http header injection or response splitting via crlf injection in content-disposition header CVE-2026-1536 Fix available 5.8 MediumJanuary 28, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more Libsoup: libsoup: http header injection via specially crafted urls when an http proxy is configured CVE-2026-1467 Fix available 5.8 MediumJanuary 27, 2026
• gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 more Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion CVE-2025-12105 Fix available 7.5 HighOctober 23, 2025
• gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +32 more +34 more Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content CVE-2025-2784 Fix available 7.0 HighApril 3, 2025
• gnome libsoup GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption. during the reading of... CVE-2024-52532 Fix available 7.5 HighNovember 11, 2024
• gnome libsoup GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to... CVE-2024-52531 Fix available 6.5 MediumNovember 11, 2024
• gnome libsoup GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0'... CVE-2024-52530 Fix available 7.5 HighNovember 11, 2024
• gnome libsoup, canonical ubuntu linux +1 more libsoup through 2.68.1 has a heap-based buffer over-read because soup_ntlm_parse_challenge() in... CVE-2019-17266 Fix available 9.8 CriticalOctober 6, 2019
• gnome libsoup, canonical ubuntu linux, debian linux +6 more +8 more The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have... CVE-2018-12910 Fix available 9.8 CriticalJune 29, 2018
• gnome libsoup, webkitgtk webkitgtk\+ +1 more WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of... CVE-2018-11713 Fix available 6.5 MediumJune 4, 2018
• gnome libsoup, debian linux, redhat enterprise linux desktop +5 more +7 more An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A... CVE-2017-2885 Fix available EPSS 23.1% 9.8 CriticalAugust 10, 2017
• gnome libsoup libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca... CVE-2012-2132 5.0 MediumAugust 20, 2012
• gnome libsoup Directory traversal vulnerability in soup-uri.c in SoupServer in libsoup before 2.35.4 allows... CVE-2011-2524 Fix available 5.0 MediumAugust 31, 2011