Buffer access with incorrect length value in libsoup - CVE-2026-0716

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU122821

Buffer access with incorrect length value in libsoup - CVE-2026-0716

Published: February 13, 2026


Vulnerability identifier: #VU122821
CSH Severity: High
CVSS v4: 7.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-0716
CWE-ID: CWE-805
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a boundary error in process_frame() function when handling WebSocket frames if a non-default configuration is used where the maximum incoming payload size is unset. A remote attacker can send specially crafted data to the application and execute arbitrary code on the system.


Affected software

libsoup
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Basesystem Module
openSUSE Leap
openEuler
Fedora
libsoup-2_4-1
libsoup-debugsource
libsoup-2_4-1-debuginfo
libsoup
libsoup-debuginfo
libsoup-devel
libsoup-help
libsoup2-devel
libsoup2-debugsource
typelib-1_0-Soup-2_4
libsoup-2_4-1-32bit
libsoup2-devel-32bit
libsoup-2_4-1-32bit-debuginfo
libsoup2-lang
libsoup-2_4-1-64bit-debuginfo
libsoup-2_4-1-64bit
libsoup2-devel-64bit
mingw-libsoup
libsoup-3_0-0
libsoup-3_0-0-debuginfo
typelib-1_0-Soup-3_0
libsoup-3_0-0-32bit-debuginfo
libsoup-devel-32bit
libsoup-3_0-0-32bit
libsoup-lang
libsoup-3_0-0-64bit
libsoup-3_0-0-64bit-debuginfo
libsoup-devel-64bit
libsoup3-help
libsoup3-devel
libsoup3-debugsource
libsoup3-debuginfo
libsoup3

How to mitigate CVE-2026-0716

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

libsoup-2_4-1 - addressed in versions 2.68.4-150200.4.24.1, 2.68.4-150200.4.36.1, 2.74.2-150400.3.26.1, 2.74.2-150400.3.34.1, 2.74.3-150600.4.24.1, 2.74.3-150600.4.33.1
libsoup-debugsource - addressed in versions 2.68.4-150200.4.24.1, 2.68.4-150200.4.36.1, 3.0.4-150400.3.40.1, 3.4.4-150600.3.28.1, 3.4.4-150600.3.42.1
libsoup-2_4-1-debuginfo - addressed in versions 2.68.4-150200.4.24.1, 2.68.4-150200.4.36.1, 2.74.2-150400.3.26.1, 2.74.2-150400.3.34.1, 2.74.3-150600.4.24.1, 2.74.3-150600.4.33.1
libsoup - addressed in versions 2.71.0-11, 2.74.2-12, 2.74.3-12
libsoup-debuginfo - addressed in versions 2.71.0-11, 2.74.2-12, 2.74.3-12
libsoup-debugsource - addressed in versions 2.71.0-11, 2.74.2-12, 2.74.3-12
libsoup-devel - addressed in versions 2.71.0-11, 2.74.2-12, 2.74.3-12
libsoup-help - addressed in versions 2.71.0-11, 2.74.2-12, 2.74.3-12
libsoup2-devel - addressed in versions 2.74.2-150400.3.26.1, 2.74.2-150400.3.34.1, 2.74.3-150600.4.24.1, 2.74.3-150600.4.33.1
libsoup2-debugsource - addressed in versions 2.74.2-150400.3.26.1, 2.74.2-150400.3.34.1, 2.74.3-150600.4.24.1, 2.74.3-150600.4.33.1
typelib-1_0-Soup-2_4 - addressed in versions 2.74.2-150400.3.26.1, 2.74.2-150400.3.34.1, 2.74.3-150600.4.24.1, 2.74.3-150600.4.33.1
libsoup-2_4-1-32bit - addressed in versions 2.74.2-150400.3.26.1, 2.74.2-150400.3.34.1, 2.74.3-150600.4.24.1, 2.74.3-150600.4.33.1
libsoup2-devel-32bit - addressed in versions 2.74.2-150400.3.26.1, 2.74.2-150400.3.34.1, 2.74.3-150600.4.24.1, 2.74.3-150600.4.33.1
libsoup-2_4-1-32bit-debuginfo - addressed in versions 2.74.2-150400.3.26.1, 2.74.2-150400.3.34.1, 2.74.3-150600.4.24.1, 2.74.3-150600.4.33.1
libsoup2-lang - addressed in versions 2.74.2-150400.3.26.1, 2.74.2-150400.3.34.1, 2.74.3-150600.4.24.1, 2.74.3-150600.4.33.1
libsoup-2_4-1-64bit-debuginfo - addressed in versions 2.74.2-150400.3.26.1, 2.74.2-150400.3.34.1, 2.74.3-150600.4.24.1, 2.74.3-150600.4.33.1
libsoup-2_4-1-64bit - addressed in versions 2.74.2-150400.3.26.1, 2.74.2-150400.3.34.1, 2.74.3-150600.4.24.1, 2.74.3-150600.4.33.1
libsoup2-devel-64bit - addressed in versions 2.74.2-150400.3.26.1, 2.74.2-150400.3.34.1, 2.74.3-150600.4.24.1, 2.74.3-150600.4.33.1
mingw-libsoup - addressed in versions 2.74.3-17.fc42, 2.74.3-17.fc43
libsoup-3_0-0 - addressed in versions 3.0.4-150400.3.40.1, 3.4.4-150600.3.28.1, 3.4.4-150600.3.42.1
libsoup-3_0-0-debuginfo - addressed in versions 3.0.4-150400.3.40.1, 3.4.4-150600.3.28.1, 3.4.4-150600.3.42.1
libsoup-devel - addressed in versions 3.0.4-150400.3.40.1, 3.4.4-150600.3.28.1, 3.4.4-150600.3.42.1
typelib-1_0-Soup-3_0 - addressed in versions 3.0.4-150400.3.40.1, 3.4.4-150600.3.28.1, 3.4.4-150600.3.42.1
libsoup-3_0-0-32bit-debuginfo - addressed in versions 3.0.4-150400.3.40.1, 3.4.4-150600.3.28.1, 3.4.4-150600.3.42.1
libsoup-devel-32bit - addressed in versions 3.0.4-150400.3.40.1, 3.4.4-150600.3.28.1, 3.4.4-150600.3.42.1
libsoup-3_0-0-32bit - addressed in versions 3.0.4-150400.3.40.1, 3.4.4-150600.3.28.1, 3.4.4-150600.3.42.1
libsoup-lang - addressed in versions 3.0.4-150400.3.40.1, 3.4.4-150600.3.28.1, 3.4.4-150600.3.42.1
libsoup-3_0-0-64bit - addressed in versions 3.0.4-150400.3.40.1, 3.4.4-150600.3.28.1, 3.4.4-150600.3.42.1
libsoup-3_0-0-64bit-debuginfo - addressed in versions 3.0.4-150400.3.40.1, 3.4.4-150600.3.28.1, 3.4.4-150600.3.42.1
libsoup-devel-64bit - addressed in versions 3.0.4-150400.3.40.1, 3.4.4-150600.3.28.1, 3.4.4-150600.3.42.1
libsoup3-help - addressed in versions 3.4.4-17, 3.4.5-13
libsoup3-devel - addressed in versions 3.4.4-17, 3.4.5-13
libsoup3-debugsource - addressed in versions 3.4.4-17, 3.4.5-13
libsoup3-debuginfo - addressed in versions 3.4.4-17, 3.4.5-13
libsoup3 - addressed in versions 3.4.4-17, 3.4.5-13

External References

Related Security Bulletins