CVE-2026-15714

Name of the Vulnerable Software and Affected Versions libsoup (affected versions not specified)

Description An out-of-bounds read occurs in the multipart processing subsystem when the soup multipart input stream read headers() function fails to properly validate the size of incoming multipart boundary strings. A remote, unauthenticated attacker can send a crafted HTTP response with a malformed or oversized boundary parameter, causing the internal stream reader to read past the allocated buffer bounds. This can lead to a denial of service (DoS) via application failure or the potential leakage of unauthorized memory metadata.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.