This advisory covers two vulnerabilities in libsoup used by spice-client-win MSI installers for Windows clients in Red Hat Enterprise Linux 8.6. CVE-2026-0719 is a stack-based buffer overflow caused by a signed to unsigned conversion error during NTLM authentication. CVE-2026-1761 is another stack-based buffer overflow occurring during multipart HTTP response parsing. Both vulnerabilities could potentially lead to memory corruption. Red Hat has released updated spice-client-win packages to remediate these issues. The advisory references Red Hat security advisory RHSA-2026:2529 and provides updated packages for various Red Hat Enterprise Linux 8.6 update services including AUS, E4S, and TUS.

Successful exploitation of these vulnerabilities could result in stack-based buffer overflows, which may lead to application crashes or potentially arbitrary code execution within the context of the spice-client-win application. The exact impact depends on exploitation conditions. Red Hat rates the security impact as Important (high severity). There are no known exploits in the wild at the time of this advisory.

Red Hat has released updated spice-client-win packages for Red Hat Enterprise Linux 8.6 variants that address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2026:2529 and the referenced article https://access.redhat.com/articles/11258 to remediate these issues. No additional mitigation steps are indicated by the vendor advisory.