CVE-2026-66337

Name of the Vulnerable Software and Affected Versions libsoup (affected versions not specified)

Description An unsigned integer underflow in the soup filter input stream read until() function leads to a heap buffer over-read during the parsing of multipart HTTP responses. A malicious HTTP server can trigger this by sending a specially crafted multipart response, which may result in the client application crashing or the disclosure of sensitive heap memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.