Search: CVE-2026-15714

CVE-2026-15714 is an out-of-bounds read vulnerability in the libsoup multipart processing subsystem of Red Hat Enterprise Linux 10. The flaw occurs in the soup_multipart_input_stream_read_headers() function, which improperly handles the size of multipart boundary strings. A remote unauthenticated attacker can exploit this by sending a crafted HTTP response with a malformed or oversized boundary parameter, causing the application to read beyond allocated memory. This can lead to denial of service or potentially unauthorized memory disclosure. The vulnerability has a CVSS score of 6.5 (medium severity).