Libsoup · Libsoup · CVE-2026-4271
**Name of the Vulnerable Software and Affected Versions**
libsoup (affected versions not specified)
**Description**
A Use-After-Free flaw exists in the libsoup library, specifically within the HTTP/2 server implementation. A remote attacker can exploit this by sending crafted HTTP/2 requests that trigger authentication failures. This can lead to the application attempting to access freed memory, potentially causing application instability, crashes, and a Denial of Service (DoS). The vulnerability affects applications relying on libsoup for handling HTTP requests.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.