CVE-2026-2369 Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources

A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service...

CVE-2026-2369 Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources

A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service...

CVE-2026-2369

A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service...

CVE-2026-2369

A vulnerability CVE-2026-2369 exists in libsoup where an integer underflow occurs when processing content with a zero-length resource, causing a buffer overread. Connected sources indicate this affects libsoup versions older than 3.4.4-14, with a patched release available (3.4.4-14). Potential im...

CVE-2026-2369

A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service...

CVE-2026-2369: Integer Underflow (Wrap or Wraparound)

A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service...

AlmaLinux 8 : libpng (ALSA-2026:4728)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:4728 advisory. libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API CVE-2026-22801 libpng: libpng: Denial of servi...

The vulnerability of the functions trace_spmi_write_begin() and trace_spmi_read_end() in the kernel’s include/trace/events/spmi.h module allows a hacker to trigger a service failure.

The vulnerability of the tracespmiwritebegin and tracespmireadend functions in the include/trace/events/spmi.h module of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2026-31966

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data. As one method of removing redundant data, CRAM uses reference-based compression so that instead of storing the full sequence for each alignment record it...

OPENSUSE-SU-2026:20384-1 Security update for libsoup

This update for libsoup fixes the following issues: Update to libsoup 3.6.6: - CVE-2025-12105: heap use-after-free in message queue handling during HTTP/2 read completion bsc1252555. - CVE-2025-14523: Duplicate Host Header Handling Causes Host-Parsing Discrepancy bsc1254876. - CVE-2025-32049:...

SUSE CVE-2026-4177

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the buffer end on...

RockyLinux 8 : libpng (RLSA-2026:4728)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:4728 advisory. libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API CVE-2026-22801 libpng: libpng: Denial of...

The vulnerability of the decode_pool() function in the net/ceph/osdmap.c module, which is part of the Linux kernel’s networking functions, allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the decodepool function in the net/ceph/osdmap.c module, which implements kernel networking functions in the Linux operating system, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected...

The vulnerability of the hwsim_cloned_frame_received_nl() function in the drivers/net/wireless/virtual/mac80211_hwsim.c module of the Linux kernel’s wireless adapter driver allows a attacker to access protected information or cause a service failure.

The vulnerability of the hwsimclonedframereceivednl function in the drivers/net/wireless/virtual/mac80211hwsim.c module of the Linux kernel wireless adapter driver is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability could allow an attacker to acce...

The vulnerability in the driver *drivers/acpi/acpica/psopcode.c* of the ACPI driver (an extended configuration and power management interface for the Linux kernel) allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the drivers/acpi/acpica/psopcode.c driver of the ACPI framework an extended configuration and power management interface for Linux kernels involves accessing memory beyond the permissible buffer data boundaries due to a violation of the specifications for data transmitted to...

The vulnerability of the resource_stream_to_stream_idx() function in the drivers/gpu/drm/amd/display/dc/core/dc_resource.c file of the DRI support driver for AMD graphics cards in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the resourcestreamtostreamidx function in the drivers/gpu/drm/amd/display/dc/core/dcresource.c file of the Direct Rendering Infrastructure DRI support driver for AMD graphics cards in Linux operating systems is related to reading beyond the buffer boundaries. Exploiting this...

The vulnerability of the perf_event_unthrottle() function, located in the kernel/events/core.c module responsible for handling kernel events in Linux operating systems, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the perfeventunthrottle function, located in the kernel/events/core.c module responsible for handling kernel events in Linux operating systems, stems from accessing memory beyond the permissible buffer data size during initialization of a variable with a default non-universal...

The vulnerability of the ntfs_list_ea() function in the fs/ntfs3/xattr.c module of the NTFS file system in the Linux operating system allows a attacker to gain access to protected information or cause a service failure.

The vulnerability of the ntfslistea function in the fs/ntfs3/xattr.c module of the NTFS file system in the Linux operating system is related to reading data beyond the allowed limits of the buffer. Exploiting this vulnerability could allow an attacker to access protected information or cause...

The vulnerability in the SoundWire driver’s drivers/soundwire/qcom.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the SoundWire driver’s qcom.c file in the Linux operating system lies in the access to memory beyond the permissible buffer data size limits, due to violations of resource configuration agreements. Exploiting this vulnerability can allow an attacker to compromise the...

CVE-2026-4359 Heap-buffer-over-read in _mongoc_http_send via strstr on non-null-terminated buffer

A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver...