CVE-2026-15713

Name of the Vulnerable Software and Affected Versions libsoup (affected versions not specified)

Description A flaw exists in the HTTP/2 protocol implementation where the library fails to correctly release memory context blocks during specific stream termination conditions, such as explicit stream resets or window exhaustion. A remote, unauthenticated attacker can manipulate the connection engine to allocate stream states that are leaked during cleanup. This incremental consumption of heap allocations can lead to a denial of service (DoS) via an Out-of-Memory (OOM) application crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.