The Red Hat security advisory RHSA-2026:2513 reports two vulnerabilities in the libsoup component used by spice-client-win MSI installers for Windows clients. CVE-2026-0719 is caused by a signed to unsigned conversion error that leads to a stack-based buffer overflow in libsoup's NTLM authentication mechanism. CVE-2026-1761 is a stack-based buffer overflow triggered during multipart HTTP response parsing in libsoup. Both vulnerabilities could potentially lead to memory corruption. The advisory covers Red Hat Enterprise Linux 8.2 AUS versions of spice-client-win and provides updated packages to remediate these issues. No CVSS scores are provided in the advisory; however, Red Hat rates the update as important.

Successful exploitation of these vulnerabilities could result in stack-based buffer overflows, potentially allowing an attacker to execute arbitrary code or cause denial of service on affected systems running spice-client-win on Red Hat Enterprise Linux 8.2 AUS. The advisory does not report any known exploits in the wild. The severity is assessed as high based on the nature of the vulnerabilities and Red Hat's classification as important.

Red Hat has released updated spice-client-win packages for Red Hat Enterprise Linux 8.2 AUS that address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2026:2513 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated or required beyond applying the official update.