PT-2026-62040 · Red Hat · Red Hat Enterprise Linux 10

CVE-2026-12548 · Publicado 2026-07-21 · Atualizado 2026-07-21

NVD

CVSS v3.1

4.2

Média

Vetor base

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L

A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soup headers parse() can cause the length parameter to be incorrectly truncated, leading to a heap buffer over-read. A remote attacker could use this flaw to crash an application using libsoup or potentially disclose heap memory contents.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2026-12548

Produtos afetados

Red Hat Enterprise Linux 10

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-12548 · Nota de Segurança
• https://gitlab.gnome.org/GNOME/libsoup/-/work_items/512 · Nota
• https://access.redhat.com/security/cve/CVE-2026-12548 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=2489996 · Nota