CVE-2026-2443
A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.
Vendor
Product
CWE
Yayın Tarihi
2026-02-13 12:16:09
Güncelleme
2026-03-23 20:16:25
Source Identifier
secalert@redhat.com
KEV Date Added
-