The libsoup library, which provides HTTP client and server capabilities for GNOME, contains two stack-based buffer overflow vulnerabilities. CVE-2026-0719 arises from a signed to unsigned conversion error during NTLM authentication processing, potentially leading to memory corruption. CVE-2026-1761 involves a stack-based buffer overflow triggered by malformed multipart HTTP response parsing. These vulnerabilities have been addressed in updated libsoup packages provided by Red Hat for Red Hat Enterprise Linux 8.2 AUS. The advisory references fixes in libsoup version 2.62.3-1.el8_2.8.

Successful exploitation of these vulnerabilities could lead to stack-based buffer overflows, which may cause application crashes or potentially allow execution of arbitrary code within the context of the affected application. The advisory rates the security impact as Important (high severity). No known exploits in the wild have been reported at this time.

Red Hat has released updated libsoup packages for Red Hat Enterprise Linux 8.2 AUS that address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2026:2396 and the referenced article https://access.redhat.com/articles/11258 to remediate these issues. No additional mitigation steps are indicated by the vendor.