This vulnerability arises from an unsigned integer underflow in the soup_filter_input_stream_read_until() function of libsoup, causing a heap buffer over-read during the parsing of multipart HTTP responses. Exploitation requires a malicious HTTP server to send a specially crafted multipart response to a client using the vulnerable libsoup version. The impact includes potential application crashes and disclosure of sensitive heap memory. The CVSS 3.1 base score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, no privileges or user interaction required, with confidentiality impact and availability impact but no integrity impact. No explicit remediation or patch information is provided in the vendor advisory at this time.

Successful exploitation can cause client applications using libsoup to crash or disclose sensitive heap memory contents. This may lead to denial of service or information disclosure. There is no indication of integrity compromise. The vulnerability can be triggered remotely by a malicious HTTP server without authentication or user interaction.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-66337 for current remediation guidance. Until an official fix is available, consider limiting exposure to untrusted HTTP servers or using alternative HTTP client libraries if feasible. Monitor the vendor advisory for updates on patches or workarounds.