CVE-2026-66337

Summary: Libsoup contains a flaw where an unsigned integer underflow in soup_filter_input_stream_read_until() leads to a heap buffer over-read while parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client a...

PT-2026-64426

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description An unsigned integer underflow in the soup filter input stream read until function leads to a heap buffer over-read during the parsing of multipart HTTP responses. A malicious HTTP server can...

SUSE-SU-2026:0431-1 Security update for libsoup

This update for libsoup fixes the following issues: - CVE-2026-1536: Always validate the headers value when coming from untrusted source to avoid HTTP header injection. bsc1257440 - CVE-2026-1761: Check length of bytes read in soupfilterinputstreamreaduntil to avoid a stack-based buffer overflow...