Junglewise Threat Intelligence

CVE-2026-0719: GNOME libsoup stack buffer overflow in NTLM authentication

CVE-2026-0719 · Severity: high · CVSS 8.6 · Published 2026-01-08

Technologies: Red Hat Enterprise Linux, Gnome Libsoup. Vendors: Red Hat, Gnome.

Executive brief

A security vulnerability has been found in libsoup, a widely used networking library that helps applications communicate over the internet. When an application using this library processes an unusually long password during login, it can cause the software to crash unexpectedly. This could allow an attacker to disrupt services or potentially gain unauthorized access to system memory.

Technical details

A stack-based buffer overflow (CWE-121) exists in the NTLM authentication handling of the libsoup HTTP library. The vulnerability is caused by a signed-to-unsigned integer conversion error during internal size calculations when processing extremely long passwords. This leads to an incorrect memory allocation on the stack followed by an unsafe memory copy operation. A remote, unauthenticated attacker can exploit this by providing a malicious password string, resulting in an application crash (DoS) or potentially arbitrary code execution. Red Hat has released several security advisories (e.g., RHSA-2026:1948) providing patched versions for affected Enterprise Linux distributions.

Affected products

  • GNOME libsoup 2.62.3, 2.72.0
  • Red Hat Enterprise Linux 7, 8, 9, 10

Timeline

  • 2026-01-08: disclosed
  • 2026-01-08: advisory
  • 2026-02-04: patched: Red Hat released initial patches for RHEL 8.8

References

Related threats