Junglewise Threat Intelligence

CVE-2026-1761: GNOME libsoup stack-based buffer overflow in multipart response parsing

CVE-2026-1761 · Severity: high · CVSS 8.6 · Published 2026-02-02

Technologies: Gnome Libsoup, Red Hat Enterprise Linux. Vendors: Gnome, Red Hat.

Executive brief

A security vulnerability has been identified in libsoup, a widely used library that allows applications to communicate over the internet. By sending a specially crafted response, an attacker could cause the application to crash or potentially take control of the affected system. This issue is particularly serious because it can be triggered remotely without any user interaction or login credentials.

Technical details

A stack-based buffer overflow (CWE-121) exists in libsoup due to an incorrect length calculation during the parsing of multipart HTTP responses. The vulnerability is located in the component responsible for handling multipart data streams. A remote, unauthenticated attacker can exploit this by serving a specially crafted multipart HTTP response to a client application using the vulnerable library. Successful exploitation can lead to memory corruption, resulting in a Denial of Service (DoS) or potential arbitrary code execution (ACE). Red Hat has released several security advisories (e.g., RHSA-2026:1948, RHSA-2026:2005) providing patched versions for various Enterprise Linux releases.

Affected products

  • GNOME libsoup 2.62.3, 2.72.0
  • Red Hat Red Hat Enterprise Linux 7, 8, 9, 10

Timeline

  • 2026-02-02: disclosed
  • 2026-02-04: patched: Red Hat released initial security updates (RHSA-2026:1948)

References

Related threats