Threats Tagged 'ghsa-pq26-x6qp-8qr7'

Two high-severity vulnerabilities were identified in libsoup, an HTTP client/server library for GNOME. The first is a heap use-after-free triggered by a GOAWAY frame in the HTTP/2 client (CVE-2026-85197). The second is a heap buffer overflow in SoupSession caused by a crafted SETTINGS frame with an INITIAL_WINDOW_SIZE parameter (CVE-2026-85534). Both issues can lead to memory corruption. These vulnerabilities affect multiple versions of libsoup across various Linux distributions including Red Hat and Ubuntu. Fixes are available through official updates.