← voltar
CVE-2026-1761

Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response

CVSS 8.6 HIGHEPSS 0.9%CWE-121
Vexday Risk Score
21Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 8.6EPSS 0.9%KEV nãoPoC Nuclei Metasploit Patch referenciado
Ciclo de vida
02 fev 2026Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A flaw was found in libsoup. This stack-based buffer overflow vulnerability occurs during the parsing of multipart HTTP responses due to an incorrect length calculation. A remote attacker can exploit this by sending a specially crafted multipart HTTP response, which can lead to memory corruption. This issue may result in application crashes or arbitrary code execution in applications that process untrusted server responses, and it does not require authentication or user interaction.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →