CVE-2026-12548
published 2026-07-21CVE-2026-12548: A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soup_headers_parse()…
PriorityP419medium4.2CVSS 3.1
AVNACHPRNUIRSUCLINAL
EPSS
0.25%
16.0th percentile
A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soup_headers_parse() can cause the length parameter to be incorrectly truncated, leading to a heap buffer over-read. A remote attacker could use this flaw to crash an application using libsoup or potentially disclose heap memory contents.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | libsoup3 | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.14.2MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
vendor_redhat4.2MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Red Hat libsoup HTTP Headers Parsing soup_headers_parse length out-of-bounds (Nessus ID 345832)
vuldb·2026-09-15·CVSS 4.2
CVE-2026-12548 [MEDIUM] Red Hat libsoup HTTP Headers Parsing soup_headers_parse length out-of-bounds (Nessus ID 345832)
A vulnerability identified as critical has been detected in Red Hat libsoup. Affected by this issue is the function soup_headers_parse of the component HTTP Headers Parsing. This manipulation of the argument length causes out-of-bounds read.
The identification of this vulnerability is CVE-2026-12548. It is possible to initiate the attack remotely. There is no exploit available.
GHSA
A heap out-of-bounds read flaw was found in libsoup.
ghsa_unreviewed·2026-07-21
CVE-2026-12548 [MEDIUM] CWE-125 A heap out-of-bounds read flaw was found in libsoup.
A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soup_headers_parse() can cause the length parameter to be incorrectly truncated, leading to a heap buffer over-read. A remote attacker could use this flaw to crash an application using libsoup or potentially disclose heap memory contents.
Red Hat
libsoup: Heap out-of-bounds read in libsoup due to integer truncation
vendor_redhat·2026-04-24·CVSS 4.2
CVE-2026-12548 [MEDIUM] CWE-125 libsoup: Heap out-of-bounds read in libsoup due to integer truncation
libsoup: Heap out-of-bounds read in libsoup due to integer truncation
A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soup_headers_parse() can cause the length parameter to be incorrectly truncated, leading to a heap buffer over-read. A remote attacker could use this flaw to crash an application using libsoup or potentially disclose heap memory contents.
Package: libsoup3 (Red Hat Enterprise Linux 10) - Fix deferred
No detection rules found.
No public exploits indexed.
2026-07-21
Published