CVE-2026-12548

Description

A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soup_headers_parse() can cause the length parameter to be incorrectly truncated, leading to a heap buffer over-read. A remote attacker could use this flaw to crash an application using libsoup or potentially disclose heap memory contents.

Weakness classification

• secalert@redhat.com: CWE-125

Primary references

• secalert@redhat.com — Vendor Advisory
• secalert@redhat.com — Exploit, Issue Tracking, Vendor Advisory
• secalert@redhat.com — Exploit, Mitigation, Vendor Advisory
• 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Mitigation, Vendor Advisory