Threats Tagged 'cve-2026-85197'

Multiple security vulnerabilities have been identified in libsoup3, an HTTP library used in GNOME applications. These include a remote denial of service via unbounded decompression in the WebSocket permessage-deflate extension, a remote denial of service caused by oversized control frame protocol violations in WebSocket connections, and a heap use-after-free vulnerability in the HTTP/2 client triggered by a GOAWAY frame during body upload. Red Hat has released security updates addressing these issues in Red Hat Enterprise Linux 10 and related products.

This security update for libsoup addresses two high-severity vulnerabilities: a heap use-after-free in the HTTP/2 client triggered by a GOAWAY frame (CVE-2026-85197), and a heap buffer overflow in SoupSession caused by a crafted SETTINGS frame with an INITIAL_WINDOW_SIZE parameter (CVE-2026-85534). Both vulnerabilities can lead to memory corruption issues.

A heap use-after-free vulnerability exists in the libsoup HTTP/2 client implementation used by GNOME applications on Red Hat Enterprise Linux 10. This flaw can be triggered when a malicious HTTP/2 server or a man-in-the-middle attacker sends a GOAWAY frame during an asynchronous file upload, potentially causing memory corruption. The vulnerability may lead to information disclosure or arbitrary code execution. Red Hat has issued an important security update for libsoup3 to address this issue.