This advisory covers two security flaws in libsoup used by spice-client-win MSI installers for Windows clients. CVE-2026-0719 is a signed to unsigned conversion error that leads to a stack-based buffer overflow during NTLM authentication. CVE-2026-1761 is a stack-based buffer overflow triggered by malformed multipart HTTP response parsing. Both vulnerabilities are classified under CWE-121 (stack-based buffer overflow). Red Hat has issued updated packages for Red Hat Enterprise Linux 8 and Extended Life Cycle 8.10 versions on x86_64, s390x, ppc64le, and aarch64 architectures to remediate these issues.

Successful exploitation of these vulnerabilities could result in stack-based buffer overflows, potentially allowing an attacker to execute arbitrary code or cause a denial of service in the context of the affected spice-client-win components. The vulnerabilities affect the libsoup library's handling of NTLM authentication and multipart HTTP responses within the spice client MSI installers for Windows. No known exploits in the wild have been reported at this time.

Red Hat has released security updates that address these vulnerabilities. Users should apply the updated spice-client-win packages for Red Hat Enterprise Linux 8 and Extended Life Cycle 8.10 as detailed in Red Hat Advisory RHSA-2026:2214. For update instructions, refer to https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.