← volver
CVE-2026-0719

Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication

CVSS 8.6 HIGHEPSS 0.6%CWE-121
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.6EPSS 0.6%KEV nãoPoC Nuclei Metasploit Patch referenciado
Ciclo de vida
08 ene 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This results in incorrect memory allocation on the stack, followed by unsafe memory copying. As a result, applications using libsoup may crash unexpectedly, creating a denial-of-service risk.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →