Product
Out-of-Bounds Read Vulnerability in libsoup data URI handling
1 CVEA memory corruption vulnerability in the libsoup soup_uri_decode_data_uri function allows for out-of-bounds reads or application crashes when processing crafted data URI payloads.
Heap Use-After-Free in libsoup HTTP/2 Implementation
1 TTP 1 CVEA heap use-after-free vulnerability in the libsoup HTTP/2 client allows malicious servers or MITM attackers to trigger memory corruption via specifically timed GOAWAY frames during file uploads.
libsoup Websocket Unbounded Decompression Denial of Service Vulnerability
1 CVEA remote denial of service vulnerability, CVE-2026-15709, exists in the libsoup library's websocket permessage-deflate extension, allowing an attacker to trigger a denial of service through unbounded decompression.
Libsoup WebSocket Remote Denial of Service Vulnerability
1 CVEA remote denial of service vulnerability, CVE-2026-15711, exists in the libsoup library's WebSocket connection handling due to an oversized control frame protocol violation, allowing an attacker to cause service disruption.
Libsoup Vulnerability CVE-2026-15714 Allows Out-of-Bounds Read
1 CVEA vulnerability identified as CVE-2026-15714 in the Libsoup library's soupmultipartinputstream component allows an out-of-bounds read when processing an oversized multipart boundary string, potentially leading to information disclosure or application instability.
Libsoup HTTP/2 Frame Window Exhaustion Remote Denial of Service
1 CVEA remote denial of service vulnerability, CVE-2026-15713, exists in the soupcache component of the Libsoup library due to a memory leak that leads to HTTP/2 frame window exhaustion, potentially causing application crashes or unresponsiveness.