The libsoup library in Red Hat Enterprise Linux 9.6 Extended Update Support contains two stack-based buffer overflow vulnerabilities. CVE-2026-0719 arises from a signed to unsigned conversion error during NTLM authentication, potentially allowing memory corruption. CVE-2026-1761 involves a stack-based buffer overflow in the multipart HTTP response parsing functionality. Both vulnerabilities are rated with important security impact by Red Hat. Updated libsoup packages have been released to fix these issues.

Successful exploitation of these vulnerabilities could lead to stack-based buffer overflows, which may result in memory corruption and potentially allow an attacker to execute arbitrary code or cause denial of service. The exact impact depends on the context in which libsoup is used. Red Hat rates the security impact as Important (high severity).

Red Hat has released updated libsoup packages for Red Hat Enterprise Linux 9.6 Extended Update Support that address these vulnerabilities. Users should apply the official security update as described in the Red Hat advisory RHSA-2026:2049. For detailed update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigations are specified by the vendor.