CVE-2026-12548

Name of the Vulnerable Software and Affected Versions libsoup (affected versions not specified)

Description A heap out-of-bounds read flaw exists when parsing multipart HTTP messages. An integer type mismatch between the caller and the soup headers parse() function can cause the length parameter to be incorrectly truncated, resulting in a heap buffer over-read. A remote attacker could exploit this to crash an application using libsoup or potentially disclose the contents of the heap memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.