A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade libsoup2-devel-32bitUpgrade typelib-1_0-Soup-2_4Upgrade libsoup-2_4-1Upgrade libsoup-2_4-1-32bitUpgrade libsoup2-develUpgrade libsoup2-langUpgrade typelib-1_0-Soup-3_0Upgrade libsoup-3_0-0Upgrade libsoup-develUpgrade libsoup-langUpgrade libsoup-3_0-0-32bitUpgrade libsoup-devel-32bit | Feb 27, 2026 | Feb 27, 2026 |
| Ubuntu | — | Upgrade libsoup-gnome-2.4-1 (Ubuntu Pro)Upgrade libsoup2.4-testsUpgrade libsoup2.4-commonUpgrade libsoup2.4-1 (Ubuntu Pro)Upgrade libsoup-gnome2.4-1 (Ubuntu Pro)Upgrade libsoup-gnome-2.4-1Upgrade libsoup-gnome2.4-1Upgrade libsoup-2.4-1Upgrade libsoup2.4-dev (Ubuntu Pro)Upgrade libsoup2.4-devUpgrade libsoup-2.4-1 (Ubuntu Pro)Upgrade libsoup2.4-tests (Ubuntu Pro)Upgrade libsoup2.4-common (Ubuntu Pro)Upgrade libsoup2.4-1 | Jul 12, 2026 | Jul 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub