CVE-2026-2443

Name of the Vulnerable Software and Affected Versions libsoup (affected versions not specified)

Description A flaw exists in libsoup, an HTTP library used in GNOME-based systems. Improper validation of HTTP Range headers when processing specially crafted requests can lead to out-of-bounds read access to server memory in certain configurations. Exploitation requires a vulnerable configuration and access to a server utilizing the embedded SoupServer component. The vulnerable function is handle partial get().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.